.KRAB File Extension

GandCrab V4 Ransomware Encrypted File

Developer N/A
3.6  |  14 Votes

What is a KRAB file?

A KRAB file is a file encrypted by the GandCrab V4 virus, a trojan horse utilized by cybercriminals. It contains a user's file, such as a .XLSX or .MP4 file, encrypted with the Salsa20 algorithm. KRAB files became prevalent in July 2018 and are similar to .GDCB files.

More Information

The GandCrab V4 virus is ransomware, where the purpose of the virus is to take your computer files hostage and force you to pay the perpetrator (typically via bitcoin) to unlock your files. The virus is a trojan horse that is commonly introduced through fake blogs that provide cracked software. Users download and install the software, which is actually the GandCrab V4 virus that scrambles, renames, and encrypts the user's files. The virus then generates a .TXT ransom note (KRAB-DECRYPT.txt) informing you of the takeover and what you need to do to recover your files.

Common KRAB Filenames

filename.ext.KRAB - Encrypted files have the KRAB extension appended to the end of the file. For example, sample.xls becomes sample.xls.KRAB.

How to open a KRAB file

There is no program currently available to effectively restore KRAB files to their original state. If you backup your files, you can execute a full system restore.


FileInfo.com recommends you never pay a ransom to decrypt files encrypted by ransomware. Paying a ransom encourages ransomware distributors to continue their efforts, and there is no guarantee that paying a ransom will give you access to your files. Instead, you should restore your data from a recent backup created before the ransomware infected your computer.

Open over 400 file formats with File Viewer Plus.Free Download

Programs that open KRAB files

System Restore

Verified by FileInfo.com

The FileInfo.com team has independently researched the GandCrab V4 Ransomware Encrypted file format and Windows apps listed on this page. Our goal is 100% accuracy and we only publish information about file types that we have verified.

If you would like to suggest any additions or updates to this page, please let us know.