The virus-blackmailer needs no decoding

29th June 2008

“Kaspersky Labs” which had reported on the emergence of a virus-blackmailer encrypting files content and requiring money in exchange for the key, has recently informed all the victims that there is a way out.
It turns out that the virus Gpcode.ak acts as follows: first, it encodes the contents of the file on the RSA algorithm with a 1024-bit key and then deletes the original file. If you do not produce any records on the hard disk, the likelihood of recovery deleted files is equal to zero.
Note that the message on the emergence of the virus reads as follows: “There is currently no way to restore data encrypted by the blackmailer by yourself.” However, all victims, who contact technical support, are strongly recommended to use utilities for restoring deleted files. That is, you can not restore the encrypted information, but you can save deleted one.
Meanwhile, “Kaspersky Lab” is working on the destruction of the infamous virus.