Security researcher Michael Gillespie has developed a new Windows app to help victims of ransomware infections. The tool identifies files encrypted by several types of ransomware families and provides the user with the option to copy or move the files to a new location. The app works in tandem with the ID Ransomware service, meaning you have to be online when running the app. It can be downloaded from here (For now, the ZIP is password-protected with the password: false-positive). More features will arrive in the future, including an “offline mode”””
Source: https://www.bleepingcomputer.com/news/security/cryptosearch-finds-files-encrypted-by-ransomware-moves-them-to-new-location/