Developed an application that recovers files encrypted by CoinVault

Kaspersky Lab and the Dutch police have developed and published an application that allows you to recover files that were encrypted with the CoinVault virus. This application uses decoding keys found by the police when retrieving the CoinVault server database.



Trojan-extortionist CoinVault encrypts data on the disk and blocks access to the computer system. Unlike other ransomware, CoinVault allows you to see a list of encrypted files and offers to try to decrypt them for free, and this can be done only once



In order to decrypt files, you need to copy the address of the Bitcoin wallet specified in the banner, get a list of encrypted files and remove the virus using a trial version of Kaspersky Internet Security. Then you need to go to the utility's website and insert the Bitcoin wallet address in the field, then get the decoding keys that you will need after downloading the application.

')

The tool is not 100% effective, but the Dutch police are still hoping to discover new decoding keys and improve tool success rates. The author of the virus has not yet been arrested, but, according to the Dutch police, may be located in the Netherlands.



700 Dutch users became victims of CoinVault.