How to get the files back for free
For files ending in .xxx, .ttt, .micro, .mp3 or with no new ending at all, the released master key works.
A BleepingComputer contributor known as BloodDolly updated the free tool TeslaDecoder to version 1.0 so it can handle TeslaCrypt 3.0 and 4.0 files. ESET also published a decryptor for these versions.
In Cisco Talos’s account, a later update on 9 June 2016 made their own decryptor work with every TeslaCrypt version. Download a tool only from the vendor or from the BleepingComputer article, never from an unknown mirror. Scan the download before you run it, because fake decryptors are a known trick.
With TeslaDecoder you extract the zip, run TeslaDecoder.exe, click Set Key and choose the ending your files carry. Click Set Key again, then use Decrypt folder for one folder or Decrypt all for the computer. Say no when it asks to overwrite the files. If you decline, the encrypted originals are kept as .TeslaBackup files.
Work on a copy first. Remove the ransomware before you decrypt, with a full and an offline Microsoft Defender scan, and unplug backup drives until the PC is clean. If the tool reports a wrong key or a file it cannot read, the family may not be TeslaCrypt. Upload the note and one file to ID Ransomware to check.
