cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Update: Find information on Dropbox support during COVID-19 here
Close
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

All my files have been renamed with a .KRAB extension

Explorer | Level 3

Something is wrong with the files in my dropbox. The extention on the file names are ".pdf.KRAB"

1 Accepted Solution

Accepted Solutions
Highlighted

Re: VIRUS "KRAB"

Super User
Super User

Hi Cindy, unfortunately it sounds like your computer may be infected with a nasty ransomware program called GandCrab. You can read more about it here.

 

Recovering all of the files may be impossible. The idea of the malware is that it encrypts your files so that only the creator of the malware can decrypt them. Usually there will be some kind of popup telling you to send a bunch of money/cryptocurrency in order to have your files restored. While this payment can work, there are certainly no guarentees that they won't take the money and run, and you'll be encouraging them to continue their operations.

 

If you own any other devices (like an old laptop or tablet) that were synced with Dropbox at some point previously, be sure to leave them off for now and don't let them connect to the wifi. You may be able to recover some of the files from them if they haven't synced up with the newer, infected files. You may also be able to access previous versions of some files or restore deleted files using Dropbox's revision feature. Note that this is time sensitive.

 

You'll need to get the malware removed from your computer before doing anything else. Honestly, it would be a good idea to reinstall the entire operating system (after you've made a backup). If you're not comfortable doing that yourself, you can check with some friends, your school, or your workplace to see if they can help you. Be sure not to attach any backup devices to the computer until it is completely free of malware, otherwise any files on that drive may also be compromised.

 

It's hard to say exactly how you got the malware, but most of the time it's from downloading sketchy programs online. In particular, you should avoid downloading executable files (.exe being the most common) unless you're positive that it's safe. You should also backup your files regularly (especially your important ones) so that you're able to recover them if something like this happens in the future.

View solution in original post

1 Reply 1
Highlighted

Re: VIRUS "KRAB"

Super User
Super User

Hi Cindy, unfortunately it sounds like your computer may be infected with a nasty ransomware program called GandCrab. You can read more about it here.

 

Recovering all of the files may be impossible. The idea of the malware is that it encrypts your files so that only the creator of the malware can decrypt them. Usually there will be some kind of popup telling you to send a bunch of money/cryptocurrency in order to have your files restored. While this payment can work, there are certainly no guarentees that they won't take the money and run, and you'll be encouraging them to continue their operations.

 

If you own any other devices (like an old laptop or tablet) that were synced with Dropbox at some point previously, be sure to leave them off for now and don't let them connect to the wifi. You may be able to recover some of the files from them if they haven't synced up with the newer, infected files. You may also be able to access previous versions of some files or restore deleted files using Dropbox's revision feature. Note that this is time sensitive.

 

You'll need to get the malware removed from your computer before doing anything else. Honestly, it would be a good idea to reinstall the entire operating system (after you've made a backup). If you're not comfortable doing that yourself, you can check with some friends, your school, or your workplace to see if they can help you. Be sure not to attach any backup devices to the computer until it is completely free of malware, otherwise any files on that drive may also be compromised.

 

It's hard to say exactly how you got the malware, but most of the time it's from downloading sketchy programs online. In particular, you should avoid downloading executable files (.exe being the most common) unless you're positive that it's safe. You should also backup your files regularly (especially your important ones) so that you're able to recover them if something like this happens in the future.

View solution in original post

Work Smarter with Dropbox

The way we work is changing. Share and discover new ways to work smarter with Dropbox in our community.

Sound good? Let's get started.
Who's talking

Top contributors to this post

What do Dropbox user levels mean?
Need more support?