Do any of you know of a decryption utility for GandCrab 5.2? If so, what can be used to decrypt the files?
No, there isn't any decryption tools except the ones the hackers wrote to do so: https://www.bleepingcomputer.com/forums/t/693056/gandcrab-52/#entry4736624 If you/they don't have backups, then the only way to get the files readable again is to pay them the money, I'd back it all up to an external HDD if you choose to do so, then format that PC and re-install windows - you could never trust that OS to not be re-infected. Also edit the hosts file to block any sites you think may have caused the infection (the Last10 Tweaks uses someonewhocares HOSTS and I've not see a virus or Ransomware ever since - I also only use 3 trusted sources for my "places of download", never will I run a .exe on a PC without opening it with PEExplorer to see it's resources etc or testing it at VirusTotal and even then if it looks suss I'll use VirtualBox with Taskmanager open to see how it acts before letting it loose on my main PC's OS.
