Babuk ransomware decryptor released to recover files for free


Level 37
Thread author
Top poster
Feb 4, 2016
Czech cybersecurity software firm Avast has created and released a decryption tool to help Babuk ransomware victims recover their files for free
According to Avast Threat Labs, the Babuk decryptor was created using leaked source code and decryption keys.

The free decryptor can be used by Babuk victims who had their files encrypted using the following extensions: .babuk, .babyk, .doydo.
Babuk ransomware victims can download the decryption tool from Avast's servers and decrypt entire partitions at once using instructions displayed within the decryptor's user interface.

From BleepingComputer's tests, this decryptor will likely work only for victims whose keys were leaked as part of the Babuk source code dump.