Lorenz Decryptor

The Lorenz ransomware first appeared in the spring of 2021, stealing data from its victims and listing it on their website. As any other ransomware, Lorenz encrypts files on the infected computer and creates a ransom note to provide information on how to recover access to the lost data by paying up a ransom. While it is not spreading like other ransomware, Lorenz has a few victims. Luckily, the Dutch security company Tesorion released a cost-free decryption tool that can be used to unlock affected files without paying a dime.

Simply called Lorenz Decryptor, this application tries to unlock access to files that were previously encrypted by the Lorenz ransomware. It provides detailed usage instructions inside the application, but a comprehensive online guide is also available.

To find the decryption key, Lorenz Decryptor requires you to provide a ransom note, which goes by the name of “HELP_SECURITY_EVENT.html”. You can find it in any location where a file has been encrypted by the ransomware.

Uploading a ransom note should be enough to get the encryption key. However, there might be situations when this does not happen. In this case, you must also provide Lorenz Decryptor with an infected file in one of the following formats: DOCX, PPTX, XLSX, ZIP. This file is uploaded to the decryption server and, depending on how busy the server is, it might take more or less time to process it.

The last step requires you to provide the path of a folder where infected files are located, to decrypt them all. The decryptor processes all the files one by one, including those in subfolders. Obviously, the duration time depends on the number of files.

The Lorenz Decryptor is a handy solution for those who think are infected by the Lorenz ransomware. It is definitely worth a try recovering files, especially since the application is completely free, as part of the NoMoreRansom initiative.