Ransomware Decryptor Releases

Wednesday, May 10, 2017 @ 09:05 AM gHale


For those affected by the Amnesia ransomware, help is out there.

There is a new decryptor ready to take on Amnesia, a ransomware just found, said researchers at Emsisoft.

RELATED STORIES
Ransomware Decryption Tool Releases
Ransomware Updates with New Components
Botnet Teams with Ransomware
Ransomware as a Profit Center: Report
Fending off Analysis, Ransomware will Cut Decryptor

On top of that, the malware has had another variant released called CryptoBoss, said Emsisoft CTO and malware researcher Fabian Wosar.

This new family of ransomware was named Amnesia based on the extension that gets added to encrypted files by the first variant (.amnesia).

The CryptoBoss variant has yet to get a decryptor, but researchers are working on it.

For Amnesia victims, there is a tool to decrypt the ransomware.

In order to decrypt files, you need to download the decryptor first. In order for the decrypter to work, you need the encrypted and unencrypted file and drag and drop them on the executable. A good way to find a pair of files to use is to look for the sample pictures found in the default Windows folders.

It may take a while until the decryptor discovers the key used to encrypt all the files, but it can then be used to fix all the files on your computer.

The decrypter will automatically display a list of drives that will be decrypted and if there are any left out, you can add them on your own. Once everything is there, you can click the decrypt button to start the process and you’ll see each file get listed as it gets fixed.

The encrypted files may still be on your computer, so you’ll have to make sure you’ve already properly decrypted all the files before removing or archiving the affected files.



Leave a Reply

You must be logged in to post a comment.