Emsisoft Decrypter for DMALocker2

Emsisoft Decrypter for DMALocker2 is a lightweight tool that enables you to recover files that have been encrypted by the second variant of DMALocker.

When the first version of DMALocker appeared at the beginning of the year, not many security specialists took it seriously. After all, the AES key was the same for each of the infected file and it was stored in the binary.

The hackers tried to learn from their previous mistake and hence, DMALocker2 included an AES key for each file it attacked. Yet again, the RSA public key was hardcoded in the binary and thanks to the weak generator, the key can even be guessed.

You should know that the tool does not rename the files, but rather you find out that you are a victim of ransomware from the ransom note. Unfortunately, since it targets mostly companies and it is assumed to target remote desktops, the ransom is around 15 Bitcoin.

The good news is that due to the hackers hiccup of leaving the key in the binary, the RSA master key was easy to decipher. The idea behind the utility is to scan the locations you specify and identify malware that identifies itself as a DMA Locker and that features a specific ID, as you can also preview in the Options tab of the tool.

Consequentially, after you have removed the culprit from your system, you can use the decryption app to scan your computer and find the files that need unlocking. Since the keys are readily available, the process is fast and should not take too much of your time.

On a side note, while security experts managed to deal with DMALocker's first released variants, the latter versions are harder to decrypt. You should know that the 4.0 version is becoming a serious threat as the RSA key cannot be reused and it is assumed that it enters your system via the Neutrino exploit kit.

In the unfortunate event that you fell victim to DMALocker2 ransomware, then you can consider using Emsisoft Decrypter for DMALocker2 to decode files that have been infected, without having to pay the ransomware.