Babyk ransomware

[F.Askari]

Hello

In our company a ransomware lock all files on Vcenter. It add "babyk" suffix to our database files.

I attached a sample with "infected" password in bellow link.

WeTransfer - Send Large Files & Share Photos Online - Up to 2GB Free

Can anyone help us to decrypt them?

 

 

[Berny]

@F.Askari Welcome.

Please see this Topic.

[F.Askari]

Thank you.

But I want to decrypt and restore my file.

 

 

[Berny]

@F.Askari You are welcome.

If you have a  license for a Kaspersky product , please contact Kaspersky Technical Support :
→ https://support.kaspersky.com/b2c#contacts
→ Contact us → Product help → E-mail → Contact Support
→ Request Type  → Select "Malware"

Also,  in a lot of cases  files can't be decrypted without the private key that is only known by the attacker.

[murat5038]

First, run a full scan with Kaspersky and remove the malware. Then try decrypting your files with this tool:

https://files.avast.com/files/decryptor/avast_decryptor_babuk.exe