Amarjit Singh

Since the WannaCry ransomware ripped through the internet late last week, infecting hundreds of thousands of machines and locking up critical systems from health care to transportation, cryptographers have searched for a cure. Finding a flaw in WannaCrys encryption scheme, after all, could decrypt all those systems without any ransom. Now one French researcher says hes found at least a hint of a very limited remedy. The fix still seems too buggy, and far from the panacea WannaCry victims have hoped for. But if Adrien Guinets claims hold up, his tool could unlock some infected computers running Windows XP, the aging, largely unsupported version of Microsofts operating system, which analysts believe accounts for some portion of the WannaCry plague.

"Does not erase the prime numbers from memory before freeing the associated memory," says Guinet.

Based on this finding, Guinet released a WannaCry ransomware decryption tool, named WannaKey "It does so by searching for them in the wcry.exe process. This is the process that generates the RSA private key. The main issue is that the CryptDestroyKey and CryptReleaseContext does not erase the prime numbers from memory before freeing the associated memory." says Guinet So, that means, this method will work only if:

1. The affected computer has not been rebooted after being infected.
2. The associated memory has not been allocated and erased by some other process.

"In order to work, your computer must not have been rebooted after being infected. Please also note that you need some luck for this to work (see below), and so it might not work in every case!," Guinet says. Download Tool here @ https://github.com/gentilkiwi/wanakiwi/releases