Author

Topic: Infected with Wannacry? Get FREE Help (Read 309 times)

U2
hero member
Activity: 676
Merit: 503
I used to be indecisive, but now I'm not sure...
May 21, 2017, 12:50:56 PM
#2
So basically this is only for ancient OS's? I thought that wannacry hit lots of people on Windows 10 etc? Did it not?
hero member
Activity: 1132
Merit: 536
May 21, 2017, 12:46:56 PM
#1
wanakiwi

Introduction

This utility allows machines infected by the WannaCry ransomware to recover their files.

wanakiwi is based on wanadecrypt which makes possible for lucky users to :

Recover the private user key in memory to save it as 00000000.dky
Decrypt all of their files
The Primes extraction method is based on Adrien Guinet's wannakey which consist of scanning the WannaCry process memory to recover the prime numbers that were not cleaned during CryptReleaseContext().

Adrien's method was originally described as only valid for Windows XP but @msuiche and I proved this can be extended to Windows 7.

Source: https://github.com/gentilkiwi/wanakiwi


***********************AND******************************

Wannakey

WARNING

This software has only been tested and known to work under Windows XP, 7 x86, 2003, Vista and Windows Server 2008 (tests by @msuiche).


Source: https://github.com/aguinet/wannakey
Jump to: