CM02
CM02
CM02

May 20, 2017

Fix For Global Ransomware WannaCry, If You Haven't Rebooted Your PC

By: Low Chern Lin



CREDIT: @FENDIFILLE/TWITTER

A week has passed since the outbreak of the WannaCry ransomware which has already infected more than 300,000 computers worldwide. As affected users are at the brink of losing their important data forever, security experts and researches has released a possible fix to reverse the mess caused by the WannaCry ransomware.


French researcher Benjamin Delpy recently released the WanaKiwi, a possible fix for the WannaCry mess based on Quarks Lab researcher Adrien Guinet's WannaKey tool. The fix are meant for victims who is on Windows XP to 7 and haven't rebooted their computer after getting struck by the ransomware.

The idea behind this that the ransomware will generate an unlock key when it hits the victim's computer and that key will stay hidden in the memory as long as the computer hasn't been rebooted. As you run WanaKiwi, the program will start searching for prime numbers (aka the key) in the memory. If you're lucky enough to have the key found, you'll be getting your files back.

To learn more about WanaKiwi and WannaKey tool, head on to the GitHub page of Adrien Guinet's and Benjamin Delpy at the links below:

Adrien Guinet's GitHub Page: https://github.com/aguinet/wannakey
Benjamin Delpy's GitHub Page: https://github.com/gentilkiwi/wanakiwi



(Source: CNET, The Hacker News)

ROG01