Security researcher Michael Gillespie has developed a new Windows app to help victims of ransomware infections.
Named CryptoSearch, this tool identifies files encrypted by several types of ransomware families and provides the user with the option to copy or move the files to a new location, in hopes that a decrypter that can recover the locked files will be released in the future.
Gillespie developed the app as a recovery and cleaning utility for computers that have been infected by undecryptable ransomware strains.
In these cases, it is impossible for PC owners to recover locked files, so the best course of action is to move all the encrypted data to a backup drive and wait until security researchers find a way to break the ransomware's encryption.
Full Article
CryptoSearch Finds Files Encrypted by Ransomware, Moves Them to New Location
Userlevel 7
+52
Userlevel 7
Interesting concept but not really sure how useful this really is...after all...it does not really matter where the fiels are located if they are encrypted and there is no decryptor...which is the most likely outcome.
Reply
Login to the community
No account yet? Create an account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.