Sharing is caring!

In this article we have good news for you.This article tells you about how to get rid of Ransomware virus and decrypt the encrypted files. This Ransomware Decryptor will 100% work for you .

Decrypter for

.gero | .hese | .kvag | .meds | .moka | .nesa | .peta | .seto | .karl | .kuub | .reco | .noos | .bora

ONLY for files crypted by the OFFLINE KEY

Find the PesonalID.txt file on your infected machine. This file is in the folder C:\ SystemID\PesonalID.txt.

You will be able to check if there is only one or multiple ID.

If one of this ID is ending by t1 there is some chance that some or your files are crypted by the offline key and, when we will find it, you will be able to recover those files for free.

If you find ID not ending by t1 there are some bad chance that somes of your files are crypted by an online key and, for the moment, there are no way to decipher them except by paying the ransom to hackers. We highly recommand to victims not to pay any ransom to these criminal hackers because this is giving them strengh to continue this dirty business.

  1. Download:
  2. Backup all your encrypted files to an external drive before start decrypting.
  3. Start decrypter_2.exe
  4. Copy and paste the key for your variant below:

You need copy-paste Private key with —–BEGIN PRIVATE KEY—– and —–END PRIVATE KEY—–

.seto =
.gero =
.hese =
.kvag =
.meds =
.moka =
.peta =
.nesa =
.karl =
.kuub =
.reco =
.noos =
.bora =

Select the button Decrypt file to make a test with one file before selecting Decrypt Folder or Start.

Many victims have files crypted by both an online key and the offline key so it may not decrypt all your files.

 Credit: Emmanuel_ADC-Soft, Yousif_Ayman, Demonslay335

Sharing is caring!