WannaCry Ransomware Decryption Tool

wannacry-bbc

A security researcher has discovered a loophole in the WannaCry encryption software that may allow the machine infected to be recovered.

This is not 100% but might work.

Reports suggest it will work for Windows XP, Windows 7, Windows Vista, Windows Server 2003 and 2008

Instructions:

DO NOT SWITCH OFF THE COMPUTER ( ** VERY IMPORTANT ** )

UNPLUG THE COMPUTER FROM THE INTERNET (Switch off your router or unplug the INTERNET cable or switch off the wireless – If in doubt- ask)

RING US IMMEDIATELY  and we will come to you.

Hope for Ransomware Victims

nomoreransom.org

Although there is currently no cure for the WannaCry Ransomware that hit the NHS on 11th May 2017, there may be hope for those attacked in the past.

Kaspersky labs, Intel Security, Europol, and the Dutch Police to launch No More Ransom, a free online portal which provides keys to unlocking encrypted files, as well as information on how to avoid getting infected in the first place.

We have always suggested either imaging (a special type of backup) or removing the disk drive of computers that have been affected and keeping it in a safe place for the future.

We always hoped that clever people would find ways to un-encrypt the computers or the the criminals are caught and the software keys recovered.

If you have been the victim of encryption in the past, visit the No More Ransom website or site or get in touch with us and we can give the tools a try.

Best of luck.

Ransomeware Alert

To avoid being a victim of the latest Cerber Ransom-ware make sure you run updates on all the software on your computer.

In addition to the Windows update, you need to ensure the following applications are also up to date:

  • Flash Player
  • Silverlight
  • Internet Explorer or Edge

What is Ransom-ware?

Illegal software that encrypts the contents of your computer (silently in the background) then asks for money to provide you with a code to unlock the computer.

All your documents, pictures and data will be affected. If you have a backup drive plugged in when this happens, this will also be encrypted.

Will My Anti-Virus protect me?

Possibly. It depends on the product you have purchased. The attack may come from compromised adverts on legitimate web sites, so ensure you have an Ant-Virus solution that blocks malicious adverts. We recommend Kaspersky Anti-Virus. Attacks like this are called Drive-By attacks and you don’t have to click on anything.

What can I do if I have been infected?

Generally the prospects are grim. There are means to decrypt your computer but it depends on which malware was installed. You may have to pay the criminal in the end if the files are really valuable ( A lot of large companies have had to take this route) but there is no assurance it will work. After all you are dealing with criminals. Prevention is the best cure.

Safeguarding against catching viruses and malware.

  • Update your software as soon as possible.
  • Backup your computer regularly and if possible make 2 backups. Perhaps use a external drive plus a cloud backup system like Carbonite.
  • Never leave backup drives attached to computers – ideally have two drives and swap them over weekly and only leave them attached while backing up.
  • Ensure you use unique passwords on all your accounts.
  • Disable the Adobe Flash plugin in your browser – or at least make it run on demand instead of automatically.

Why not ask us to give your computer a security check? We can show you what needs to be done on a regular basis or do it for you.