.GDCB File Extension
GandCrab Ransomware Encrypted File
4.0 | 6 Votes
What is a GDCB file?
A GDCB file is a file encrypted by the GandCrab virus, a trojan horse utilized by cybercriminals. It contains a user's file, such as a .PDF or .WMV file, encrypted with the Salsa20 algorithm. GDCB files became prevalent in January 2018.
The GandCrab virus is ransomware, where the purpose of the virus is to take your computer files hostage and force you to pay the perpetrator (typically via DASH currency) to unlock your files. The GandCrab V4 virus scrambles, renames, and encrypts the user's files. It then generates a .TXT ransom note (GDCB-DECRYPT.txt) informing you of the file encryption and what you need to do to recover your files.
Common GDCB Filenames
filename.ext.GDCB - Encrypted files have the GDCB extension appended to the end of the file. For example, sample.xlsx becomes sample.xlsx.GDCB.
How to open a GDCB file
The Bitdefender GandCrab Decrypt Tool may be able to decrypt GDCB files and it is available for free. Also, if you back up your files, you can execute a full system restore.
FileInfo.com recommends you never pay a ransom to decrypt files encrypted by ransomware. Paying a ransom encourages ransomware distributors to continue their efforts, and there is no guarantee that paying a ransom will give you access to your files. Instead, you should restore your data from a recent backup created before the ransomware infected your computer.