<style>/*<link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=3589136026507255572&zx=eade4ae4-2c1e-4ba4-b308-2df48e9fbda9' media='none' onload='if(media!='all')media='all'' rel='stylesheet'/><noscript><link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=3589136026507255572&zx=eade4ae4-2c1e-4ba4-b308-2df48e9fbda9' rel='stylesheet'/></noscript>
<meta name='google-adsense-platform-account' content='ca-host-pub-1556223355139109'/>
<meta name='google-adsense-platform-domain' content='blogspot.com'/>

<script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-2831139136270004&host=ca-host-pub-1556223355139109" crossorigin="anonymous"></script>

<!-- data-ad-client=ca-pub-2831139136270004 -->

<link rel="stylesheet" href="https://fonts.googleapis.com/css2?display=swap&family=Roboto&family=Open+Sans&family=Consolas&family=Source+Sans+Pro&family=Raleway"></head><body>*/</style>

Free decryptor for Diavol ransomware

Free decryptor for .lock64 Diavol ransomware

a free decryption tool has been released by Emsisoft to help Diavol ransomware victims recover their .lock64 files without paying a ransom.

Diavol ransomware victims can download the free tool

from Emsisoft's to decrypt their data using detailed instructions available in this usage guide.

"The decryptor needs a file pair of one encrypted file and the original, to get the needed key for decrypting the rest of your data,the decryptor will pre-populate the locations to decrypt with the currently connected drives and network drives."

This Diavol ransomware decryption tool will keep the files encrypted in the attack as a failsafe, if the decrypted files are not identical to the original documents.

The decryptor can partially recover some files larger than the pair of files provided for reconstructing the encryption keys. This is required because the decryptor might fail to recover such files due to technical limitations.

Diavol changes encrypted Windows devices' backgrounds to a black wallpaper with an "All your files are encrypted! For more information see README-FOR-DECRYPT.txt" message.

Notably, while the Diavol ransomware originally created ransom notes named README_FOR_DECRYPT.txt.

Free decryptor for Diavol ransomware

.lock64 Diavol ransomware note

--------------------------------------------------

README_FOR_9B1D77DE-2FC4-4746-8C7C-95C0EFF2AF08.txt

# What happened? #

Your network was ATTACKED, your computers and servers were LOCKED.

You need to buy decryption tool for restore the network.

Take into consideration that we have also downloaded data from your network that in case of not making payment will be published on our news website.

# How to get my files back? #

1. Download Tor Browser and install it.

2. Open the Tor Browser and visit our website - https://r2gttyb5vqu6swf5.onion/[redacted]/[redacted]

Tor Browser may be block in your country or corporate network. Try to use Tor over VPN!

--------------------------------------------------

Diavol ransomware made by TrickBot gang's, a Russian-based financially motivated cybercrime group operates the Trickbot botnet used to drop second-stage malware on compromised systems and networks.

The FBI first learned of the ransomware strain in October 2021, and, since then, it has seen ransom demands between $10,000 and $500,000, with lower payments accepted following ransom negotiations.

<style>/*
<script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/3586246945-widgets.js"></script>
<script type='text/javascript'>
window['__wavt'] = 'AOuZoY4j3hqwygAPTkURAeG_CsrI5DtPeg:1728257558795';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d3589136026507255572','//mango-school.blogspot.com/2022/03/free-decryptor-for-diavol-ransomware.html','3589136026507255572');
_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '3589136026507255572', 'title': 'Mango School for Information Technology and Cyber Security', 'url': 'https://mango-school.blogspot.com/2022/03/free-decryptor-for-diavol-ransomware.html', 'canonicalUrl': 'https://mango-school.blogspot.com/2022/03/free-decryptor-for-diavol-ransomware.html', 'homepageUrl': 'https://mango-school.blogspot.com/', 'searchUrl': 'https://mango-school.blogspot.com/search', 'canonicalHomepageUrl': 'https://mango-school.blogspot.com/', 'blogspotFaviconUrl': 'https://mango-school.blogspot.com/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': false, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': '', 'encoding': 'UTF-8', 'locale': 'en', 'localeUnderscoreDelimited': 'en', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Mango School for Information Technology and Cyber Security - Atom\x22 href\x3d\x22https://mango-school.blogspot.com/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22Mango School for Information Technology and Cyber Security - RSS\x22 href\x3d\x22https://mango-school.blogspot.com/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Mango School for Information Technology and Cyber Security - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/3589136026507255572/posts/default\x22 /\x3e\n\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Mango School for Information Technology and Cyber Security - Atom\x22 href\x3d\x22https://mango-school.blogspot.com/feeds/5292794229245708717/comments/default\x22 /\x3e\n', 'meTag': '', 'adsenseClientId': 'ca-pub-2831139136270004', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': true, 'adsenseAutoAds': true, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/5567c04bb654202b', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': 'Get link', 'key': 'link', 'shareMessage': 'Get link', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Share to Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'Twitter', 'key': 'twitter', 'shareMessage': 'Share to Twitter', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Share to Pinterest', 'target': 'pinterest'}, {'name': 'Email', 'key': 'email', 'shareMessage': 'Email', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27en\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': true, 'jumpLinkMessage': 'Read-more \xbb', 'pageType': 'item', 'postId': '5292794229245708717', 'postImageThumbnailUrl': 'https://blogger.googleusercontent.com/img/a/AVvXsEj9yabJ9LKChgtayezd27h4NaZ4m46lrs2QdBpzfU5vET9El52qgjgNeckwSjBQOsSz5cy-FrpDmZCkJx_eu4T5_buw0LsuAsaapDp3kWcgGkYelg1-Uoe1QOi7FGv4THzt9x7bsNgWj6ozoS08CbI9lyk6xPQRWaw0xfDCsuqgeDDStf21X-hqK7yKkw\x3ds72-w320-c-h140', 'postImageUrl': 'https://blogger.googleusercontent.com/img/a/AVvXsEj9yabJ9LKChgtayezd27h4NaZ4m46lrs2QdBpzfU5vET9El52qgjgNeckwSjBQOsSz5cy-FrpDmZCkJx_eu4T5_buw0LsuAsaapDp3kWcgGkYelg1-Uoe1QOi7FGv4THzt9x7bsNgWj6ozoS08CbI9lyk6xPQRWaw0xfDCsuqgeDDStf21X-hqK7yKkw\x3dw320-h140', 'pageName': 'Free decryptor for Diavol ransomware', 'pageTitle': 'Mango School for Information Technology and Cyber Security: Free decryptor for Diavol ransomware', 'metaDescription': 'This Diavol ransomware decryption tool will keep the files encrypted in the attack as a failsafe, if the decrypted files are not identical.'}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': 'Edit', 'linkCopiedToClipboard': 'Link copied to clipboard!', 'ok': 'Ok', 'postLink': 'Post Link'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': 'Custom', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'Free decryptor for Diavol ransomware', 'description': 'This Diavol ransomware decryption tool will keep the files encrypted in the attack as a failsafe, if the decrypted files are not identical.', 'featuredImage': 'https://blogger.googleusercontent.com/img/a/AVvXsEj9yabJ9LKChgtayezd27h4NaZ4m46lrs2QdBpzfU5vET9El52qgjgNeckwSjBQOsSz5cy-FrpDmZCkJx_eu4T5_buw0LsuAsaapDp3kWcgGkYelg1-Uoe1QOi7FGv4THzt9x7bsNgWj6ozoS08CbI9lyk6xPQRWaw0xfDCsuqgeDDStf21X-hqK7yKkw\x3dw320-h140', 'url': 'https://mango-school.blogspot.com/2022/03/free-decryptor-for-diavol-ransomware.html', 'type': 'item', 'isSingleItem': true, 'isMultipleItems': false, 'isError': false, 'isPage': false, 'isPost': true, 'isHomepage': false, 'isArchive': false, 'isLabelSearch': false, 'postId': 5292794229245708717}}, {'name': 'widgets', 'data': [{'title': 'Logo', 'type': 'HTML', 'sectionId': 'header-main', 'id': 'HTML10'}, {'title': 'Icons, Dark, Search', 'type': 'LinkList', 'sectionId': 'header-main', 'id': 'LinkList10'}, {'title': 'Menu', 'type': 'LinkList', 'sectionId': 'header-main', 'id': 'LinkList11'}, {'title': 'Blog Posts', 'type': 'Blog', 'sectionId': 'blog-post', 'id': 'Blog1', 'posts': [{'id': '5292794229245708717', 'title': 'Free decryptor for Diavol ransomware', 'featuredImage': 'https://blogger.googleusercontent.com/img/a/AVvXsEj9yabJ9LKChgtayezd27h4NaZ4m46lrs2QdBpzfU5vET9El52qgjgNeckwSjBQOsSz5cy-FrpDmZCkJx_eu4T5_buw0LsuAsaapDp3kWcgGkYelg1-Uoe1QOi7FGv4THzt9x7bsNgWj6ozoS08CbI9lyk6xPQRWaw0xfDCsuqgeDDStf21X-hqK7yKkw\x3dw320-h140', 'showInlineAds': false}], 'footerBylines': [{'regionName': 'footer1', 'items': [{'name': 'share', 'label': ''}]}], 'allBylineItems': [{'name': 'share', 'label': ''}]}, {'title': 'Popular Posts', 'type': 'PopularPosts', 'sectionId': 'sidebar-static', 'id': 'PopularPosts10', 'posts': [{'title': 'How to remove ygvb Ransomware', 'id': 729607464617877353}, {'title': 'New WhatsApp Communities feature', 'id': 8367762764082842155}, {'title': 'Zzla file ransomware virus Removal Decrypt', 'id': 9089289928437659324}, {'title': 'Gujd file ransomware virus Removal Decrypt', 'id': 5638591793488345148}, {'title': 'USA bans Kaspersky - What are the reasons?', 'id': 8464110779646215258}]}, {'title': '#Recent Post', 'type': 'HTML', 'sectionId': 'sidebar-static', 'id': 'HTML19'}, {'title': 'Follow Mango school', 'type': 'LinkList', 'sectionId': 'footer-widget', 'id': 'LinkList14'}, {'title': 'Copyright', 'type': 'HTML', 'sectionId': 'copyright', 'id': 'HTML23'}, {'title': 'SVG Icons', 'type': 'HTML', 'sectionId': 'jet-options', 'id': 'HTML24'}]}]);
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML10', 'header-main', document.getElementById('HTML10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList10', 'header-main', document.getElementById('LinkList10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList11', 'header-main', document.getElementById('LinkList11'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'blog-post', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/2591911167-lbx.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/13464135-lightbox_bundle.css'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts10', 'sidebar-static', document.getElementById('PopularPosts10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML19', 'sidebar-static', document.getElementById('HTML19'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList14', 'footer-widget', document.getElementById('LinkList14'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML23', 'copyright', document.getElementById('HTML23'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML24', 'jet-options', document.getElementById('HTML24'), {}, 'displayModeFull'));
</script>
</body>*/</style>