Free remedy against BigBobRoss-ransomware available

Avast and Emsisoft provide free decryption software to those affected by the BigBobRoss version of ransomware. This allows you to unlock your files without paying any ransom.

Security specialists Avast and Emsisoft put decryption software online to help victims of ransomware. These are two tools, available through the websites of Avast and Emsisoft. The software is effective against victims of the BigBobRoss version of ransomware. This is not the most widespread variant, but the malware has nevertheless caused the necessary casualties in recent months.

Encryption

Basically, the only cure for ransomware is a good backup that is protected from malware. The encryption algorithms usually used are very solid and therefore not easy to crack. If you don’t have a good backup and can’t do without your files, you will often see no other option than to pay ransom. The fact that both security companies managed to get around the AES-128 ECB encryption is exceptional but undeniably excellent news for the victims.

The exact way in which BigBobRoss is spreading is not yet entirely clear. If you were the victim of the malware, you can check quickly. The virus encrypts your files, and provides them with the .obfuscated extension. Profile picture.jpg is thus profile picture.jpg.obfuscated. Because of the encryption it is not enough to change the extension to get your files back.

Ransom

Victims are presented with a file called Read Me.txt. That serves as the ransom note. The criminals demand money in Bitcoin, and propose victims to withdraw cash via a BigBobRoss email address.

The fact that a victim can get off without any tears thanks to Emsisoft and Avast is more the exception than the rule. It remains a good idea to take backups, and segment them from the endpoints. For example, a malware infection of a laptop, for example, cannot also encrypt the backup.

Related: Sharp increase in number of ransomware attacks in Belgium