Free decryption tool Now available for all Bart ransomware versions

    Free decryption tool Now available for all Bart ransomware versions

    Free decryption tool Now available for all Bart ransomware versions


    Posted: 06 Apr 2017

    Users who have had their files encrypted by any version of the Bart ransomware program are in luck: Antivirus vendor Bitdefender has just released a free decryption tool.

    The Bart ransomware appeared back in June and stood out because it locked victims' files inside ZIP archives encrypted with AES (Advanced Encryption Standard). Unlike other ransomware programs that used RSA public-key cryptography and relied on a command-and-control server to generate key pairs, Bart was able to encrypt files even in the absence of an internet connection.

    The original implementation of Bart did have some weaknesses and security researchers from antivirus firm AVG, which is now part of Avast, created a tool that could guess the password for the ransomware's archives using brute-force methods. The decryptor required the user to have at least one unaffected copy of a file that had been encrypted.
    A free decryption tool is now available for all Bart ransomware versions | PCWorld
    Borg 386's Avatar Posted By: Borg 386
    06 Apr 2017


  1. positronic
    Posts : 136
    .
       New #1

    The No More Ransom Project

    I read about that at No More Ransom 15 New Ransomware Decryption Tools Available for Free which is what you mention. Sadly it looks like the tools are hosted and not available for download, so somewhere a copy of your files may remain behind in some server, despite their claim that its deleted... Im sceptical especially since the trend (especially from most governments) is to gain access to peoples data by any and all means.

    See The No More Ransom Project legal page which is not in English but says...

    The Regulation regulates the process of providing information to the No More Ransom website (hereinafter referred to as "the website").

    PLEASE NOTE! Before you upload any files on this website, you must carefully read the terms and conditions set out in this regulation. If you do not accept all terms, you should not upload any files on this website.

    This website is designed to detect the variant of the Ransomware that you are attacked by scanning the infected files. This makes it possible to check whether a solution is available. To do this, the website allows you to upload files to their servers to perform scans, and allow experts to analyze them to define the type of ransomware.
    Uploading an object to scan confirms that you are the legal owner of the uploaded object and that the object is not confidential and does not contain any sensitive information. By uploading an object for scanning (performing an upload), you grant the owner of the site a non-exclusive and uncompensated right to copy, save, and delete the uploaded object for scanning purposes. The uploaded object is not unpacked or unlocked after the scan is completed. The results of scanning are displayed on the completed scanning web page. The uploaded object is deleted immediately after scanning from the web servers.

    The data are sent to the web page via a secure channel.

    The use of the website for the creation of data or codes, which are intended for detection, blocking or disinfecting of threats or for the generation of harmful data or codes, is forbidden.

    A malfunction of the operation of the website or access to the services of the website by bypassing the standard interface (with undocumented functions) is prohibited. The use of the website must comply with the legal requirements, including the applicable legislation and the rules for export and re-export.
    They should make all these tools available for download and self update-able because lets face it this is somewhat unacceptable for most usage where the data is confidential or of a sensitive nature.

    Not so great news imo for all user segments.
    Last edited by positronic; 09 Apr 2017 at 03:00.
      My Computer
    Quote Quote

 

  Related Discussions
Read more: Hit by ransomware? No More Ransom portal adds 32 more free decryption tools to help you | ZDNet
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 08:40.
Find Us




Windows 10 Forums