Lost all your files to some nasty ransomware?

We're here to fix that.

Download one of our free decryptor tools to recover your files without paying the ransom

No More Ransom

Associate Partner

I need removal help
[May, 2, 2017] - Version:

Emsisoft Decryptor for Cry128

Cry128 belongs to the CryptON/Nemesis ransomware family that is mostly used for targetted attacks via RDP. Files are encrypted using a customized version of AES and RSA. We have seen the following extensions being used by Cry128: ".fgb45ft3pqamyji7.onion.to._", ".id__gebdp3k7bolalnd4.onion._", ".id__2irbar3mjvbap6gt.onion.to._" and ".id-_[qg6m5wo7h3id55ym.onion.to].63vc4".

To use the decrypter, you will require an encrypted file of at least 128 KB in size as well as its unencrypted version. To start the decrypter select both the encrypted and unencrypted file and drag and drop them onto the decrypter executable.