Ransome ware decrypt (Scarab)

Curtis Long
Curtis Long used Ask the Experts™
on
I have a friend who was hit with ransom ware.  The files are encrypted with scarab extensions.

He tried paying the ransom but did not receive any fix.

Is there anyway to decrypt the data or is he just pretty much up the creek??

He does not have any backups.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Business Consultant (Owner)
Most Valuable Expert 2012
Expert of the Year 2018
Commented:
No. Every new version is harder to crack. No hope there, and your friend just learned a harsh lesson about poor spam control and no backups.
AlanConsultant
Commented:
Agreed - there is no realistic hope of recovery.

As always, proper backups are the only real answer.

Sorry for your friend.

Alan.
Jackie Man IT Manager
Top Expert 2010
Commented:
Paying the cybercriminals will not help you to recover the data and they will only mark you as a VIP and their peers will attack you more and more.
Olgierd UngehojerSenior Network Administrator

Commented:
Some times antivirus companies providing some decryption tools, you can find on Kaspersky webpage. Sometimes shadow copy helps or deep data recovery from hdd may help. Paying to criminals is bad idea and it never works.
JohnBusiness Consultant (Owner)
Most Valuable Expert 2012
Expert of the Year 2018

Commented:
Thanks. I hope you will be able to help your friend make good backups on an ongoing basis.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial