Bitdefender Decryption Utility for GoGoogle ransomware

One of the most frustrating situations is when your computer gets infected by ransomware. You feel powerless watching the malware take over your files one by one, encrypting them and leaving behind just a ransom note that does not offer any guarantee that you will get your data back in the original form.

That is why the major players in the cyber security industry strive to find solutions to the ever-growing array of ransomware types and variants. The result is the collection of anti-ransomware dedicated tools, such as the Bitdefender Decryption Utility for GoGoogle ransomware.

As you probably imagine, this particular application is designed to help you recover access to the files that the GoGoogle (aka BossiTossi) ransomware encrypted. It is a simple software utility that you will surely find helpful in case GoGoogle reached your Windows machine.

Once you go over the license agreement, you are welcomed by the main window of the application, which enables you to initiate a new scan. There are two scan methods: one targets a specific folder where the encrypted files are located, while the other runs an analysis of the entire system. It is highly recommended that you also choose to backup files before running the scan.

The so-called “test folder” must contain four files, both pairs of original and encrypted files. One of the pairs must have both files smaller than 1 MB, while the other must have both files larger than 2MB. This is mandatory, as GoGoogle is known to use two encryption methods, depending on the size of the files. Please keep in mind that some GoGoogle variants can completely destroy files unde 2MB, making them impossible to recover.

The GoGoogle ransomware first made its way in the cyber world in the spring of 2020, encrypting files on the victim’s computer and appending them the “.google” extension. Obviously, the popular search engine has nothing to do with it.

Written in the Go language, the ransomware is deployed in two versions that use two distinct encryption algorithms, depending on the size of the target file. One version uses the XOR encryption, while the other applies the XOR algorithms for files larger than 1 MB and RSA for files smaller than 1 MB.

If you find symptoms of GoGoogle on your PC, the Bitdefender Decryption Utility for GoGoogle ransomware will surely be of help. Unfortunately, the application can only process files encrypted with the XOR method. On the bright side, you can also run it via the command line, which makes it versatile and ready for deployment automation.