Disable malicious HiddenTear Ransomware with HT Brute Forcer

If your system has been infected with HiddenTear, do not worry because a program called HT Brute Forcer (developed by Michael Gillespie) can allow you to recover your encrypted files but Don't pay ransom.

HiddenTear is the name of a family of full-source extortion software released on GitHub.This allows an attacker to download the source code and create their own ransomware variants, and these variations can be used to infect large-scale.

How to remove / fix ransomware WannaCry

Disable malicious HiddenTear Ransomware with HT Brute Forcer Picture 1

Due to the huge availability of source code, there are many ransomware variants developed under different names but still use the same HiddenTear code base.However, it is also the use of the same platform code that makes these types of malicious code more easily decoded.We can completely use a single decoding method to deal with many different HiddenTear variants.

Some HiddenTear variants are supported by this decoding tool including:

8lock8, AnonCrack, Assembly, Balbaz, BankAccountSummary, Bansomqare Wanna, Blank, BloodJaws, Boris, CerberTear, CryptConsole2, CryptoKill, CyberResearcher, Data_Locker, Dev-Nightmare 2xx9, Diamond, Domino, Donut, dotRansom, Executioner, Executioner2, Executioner3, Explerer, FlatChestWare, Frog, Fuck_You, Gendarmerie, Horros, JobCrypter, Jodis, J-Ransomware, J-Want-To-Cry, Karmen, Kraken 2.0, Kratos, LanRan, Lime, Lime-HT, Luv, Matroska, MireWare, MoonCrypter, MTC , Nobug, Nulltica, onion3cry, OpsVenezuela, Paul, PayOrDie, Pedo, PGPSnippet, Poolezoor, Pransomware, Predator, Qwerty, Random6, Random6 2, Randion, RansomMine, Rootabx, Saramat, Shrug, ShutUpAndDance, Sorry, Symbiom, TearDr0p, Technicy, The Brotherhood, TheZone, tlar, TotalWipeOut, TQV, Ton, VideoBelle, WhiteRose, WhiteRose2, Zalupaid, ZenCrypt, Zenis, ZeroRansom, Zorro

If your computer is infected with HiddenTear extortion software, you can use the following instructions to proceed to decrypt your files for free.

How to decrypt the file is encrypted by HiddenTear

If you do not have HT Brute Forcer please download this software first by clicking the download link below and save the software to your Windows screen right away.

Download HT Brute Forcer

After downloading, you will have to unzip the file hidden-tear-bruteforcer.zip and then, a file named HiddenTear Bruteforcer.exe will be extracted.Now double-click the HiddenTear Bruteforcer.exe executable file to start the program launch.

Disable malicious HiddenTear Ransomware with HT Brute Forcer Picture 2

After the program has been launched, click the Browse Sample button and the program will ask you to find the encrypted PNG file.The smaller the better.

Disable malicious HiddenTear Ransomware with HT Brute Forcer Picture 3

After you have selected an encrypted file, the tool will indicate that the file has been uploaded.Now, click on Start Bruteforce button to start decoding as shown below.

Disable malicious HiddenTear Ransomware with HT Brute Forcer Picture 4

The program will now start taking the decryption key.This process may take some time, so please wait patiently while Bruteforcer works.

Disable malicious HiddenTear Ransomware with HT Brute Forcer Picture 5

When you find a successful encryption key, the program will automatically decrypt the encrypted file that you have uploaded, and ask you to determine if it has been properly decrypted.

Disable malicious HiddenTear Ransomware with HT Brute Forcer Picture 6

If the file has been properly decoded, you should record the detected key / password and save it for use with the HiddenTear decoder that you will have to download now.

Now you need to download the HiddenTear standalone decoder.

Once you have downloaded the HiddenTear decoder, you double-click the hidden-tear-decrypter.exe file to start the program.Once the program has been launched, enter the key detected above.

Disable malicious HiddenTear Ransomware with HT Brute Forcer Picture 7

After entering the key, click the Decrypt My Files button to start decrypting the files encrypted by HiddenTear on your computer.When the decoding process is completed, the program will display a screen showing how many files have been successfully decoded.

Disable malicious HiddenTear Ransomware with HT Brute Forcer Picture 8

At this point, you can close the program because your files are now decoded.

Above is how to disable malicious HiddenTear Ransomware with HT Brute Forcer.Good luck!

See more:

How to protect yourself from phishing attacks via mobile phones
How to use Trend Micro RansomBuster blocks ransomware
3 types of virus scans and the right time to use
How do I know if a file is mistakenly identified as containing malicious code?

David Pac

Update 26 May 2019

You should read it

May be interested

Detection of a new ransomware strain targeting the Windows search engine
a ransomware attack begins when the victim receives an executable file containing malicious code via email.
What is Ransomware Ryuk? How to prevent it?
cybercriminals are using a new form of ransomware to target large businesses and take money from it. since august, the ryuk team has made $ 4 million by installing malicious encryption software on high-value targets.
Forecast 2021: The world of security will be devastated by ransomware '
ransomware has been one of the top security threats for nearly three years.
Discovered new ransomware on Mac computers
accordingly, this malicious code has the ability to hijack the victim's computer, encrypt all important files and send an extortion message if you want to recover data.
How to use Acronis Ransomware Protection against ransomware
acronis ransomware protection is an anti-ransomware software on your computer that protects your computer against malicious attacks and data backup features.
Ransomware: An existing 'undercurrent' threatens businesses
how does the company respond when business data, accounting, or customer contract information is 'captured' by malicious code? that is the situation of many businesses that are victims of ransomware encryption.
Apple denies that iPhone can be brute force to open passwords easily
recently, the representative of the apple appellant denied that the information could be brute force iphone unlocked as easily as a security expert announced a few days ago.
The official LooCipher ransomware decoder has been released, helping you to retrieve data completely free
loocipher is infected and installed on the victim's system through malicious word documents, can download the malicious executable file and run the file in the system.
How to disable USB ports on Windows, Mac and Linux
now, you know that using a usb storage device on your computer has many potential security risks. if you fear the risk of being infected with malware, such as trojian, keyloggers or ransomware, you should completely disable the usb storage device if the system has a lot of sensitive data.
Ransomware STOP started installing Trojans to steal victim passwords
in addition to encrypting files on the system, ransomware stop strains have also started quietly installing the azorult password stealing trojan on the victim's computer to steal account information, electronic wallet, and file desktop ...

Disable malicious HiddenTear Ransomware with HT Brute Forcer

You should read it

May be interested

Virus Removal - Spyware