Locked Killswitch for Petya (NotPetya/SortaPetya) ransomware

[dEEpEst]

A killswitch to stop petya from encrypting your disk

Security Researchers (PT Security, TrustedSec, ...etc) seem to have identified a kill-switch that prevents petya ransomware from proceeding through its encryption process 1.

 

Simply, all that is needed are 3 files (perfc, perfc.dll, and perfc.dat) to already exist on the Windows machine, under C:\Windows, with READONLY permissions.

 

 

Usage

 

1. Launch cmd.exe as ADMIN.
   
2. Execute petya-killswitch:
   
   This is the hidden content, please

   • Sign In
   • or
   • Sign Up

   
   

3. Done.
   

 

 

[spoiler=Scanning VirusTotal]

This is the hidden content, please

• Sign In
• or
• Sign Up

 

 

Download:

[HIDE-THANKS]

This is the hidden content, please

• Sign In
• or
• Sign Up

[/HIDE-THANKS]

 

Password:

level23hacktools.com