Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Wannacry The Hacker News published an article on a workaround (with limitations).
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Wannacry The Hacker News published an article on a workaround (with limitations).

IkoulaIkoula Member, Host Rep
edited May 2017 in General

Hello,

The website The Hacker News has published an article on a way to unlock encrypted files.

The computer must have not been rebooted.

Memory must have not been overwritten.

http://thehackernews.com/2017/05/wannacry-ransomware-decryption-tool.html

Thanked by 2TheOnlyDK risharde

Comments

  • Ikoula said: The computer must NOT have been rebooted.

    Fixed it for you ;)

    Thanked by 2Ikoula sanvit
  • YuraYura Member
    edited May 2017

    That's some shady blog trying to phish on the name of "the hacker news". Loving their original research...

    https://github.com/aguinet/wannakey - the decryption tool's repo

  • IkoulaIkoula Member, Host Rep

    @dimitrisp fixed, thanks !

    Thanked by 1dimitrisp
  • risharderisharde Patron Provider, Veteran

    Wow this is some elite stuff!

  • jbilohjbiloh Administrator, Veteran

    Thanks for sharing.

  • SplitIceSplitIce Member, Host Rep

    This works because windows doesnt zero or write random data over the crypto memory right? So it has a limited time for effective use most likely.

    That being said it's really neat that a vulnerability in windows can be used to fix a pesky cryptolocker spread with via a different vulnerability.

  • cociucociu Member

    we had 2 windows vps corupted , once is unbloked and the second was not work. At lease i have one client with this data recuperated. The other one ... crying :)

  • WilliamWilliam Member
    edited May 2017

    SplitIce said: This works because windows doesnt zero or write random data over the crypto memory right?

    Only XP. Nothing later.

    The function used is also clearly documented to not work on XP.

    This other tool seems to work very rarely by the code not using any erase function at all.

Sign In or Register to comment.