Possible decryptor available for Trojan Ransom.AT

Earlier today we blogged about a trojan which encrypts key files on your drive and demands a ransom of $150. (We are calling this malware Trojan.Ransom.AT.)

After the posting, an anonymous source sent us program that appears to reverse the encryption done by this trojan. We have checked the executable and it looks like it will work in reversing the ill-effects of this ransomware. If you are infected with this trojan, please contact us and we will try and assist you in un-encrypting your files (no guarantees or warranties, of course).

Sunbelt Software Malware Research Team