';

Breaking Free: A list of ransomware decryption tools and keys

chainsSecurity software companies and research organizations are collaborating to break the encryption codes of ransomware variants and free those who have fallen victim to cybercriminals. Unfortunately for many, these efforts take time, and that’s why decryption methods often do not exist for the newest ransomware variants. The good news for those who have been infected by older ransomware is that there may be a decryption method available to recover their data.

If backups are available, the easiest course of action is to simply remove the virus, delete the infected files and restore data that has been encrypted. But that’s not always an option. In some cases, users become infected with older ransomware that is no longer being monitored for ransom payments—so paying the ransom won’t help. If your computer is infected with ransomware, the chart below may help.

Search for the ransomware in the table below and then download the decryption tool from the URL provided.  Some tools will scan for ransomware and prompt you to decrypt the files while others require you to point the decryption tool directly at the encrypted files. You may also have the option to remove the encrypted file after a decrypted version has been created. Please note: The decryption of files could take hours and a large number of encrypted files could take weeks to decrypt. In other words, be prepared to wait.

The table below was compiled in October 2016 and it contains decryption keys and links to decryption tools and or scripts that can potentially set your computer free.

Ransomware Key, Script, or Tool Vendor URL
777 Tool Emsisoft https://decrypter.emsisoft.com/download/777
Agent iih Tool Kaspersky http://media.kaspersky.com/utilities/VirusUtilities/EN/RakhniDecryptor.zip?_ga=1.69588624.1814211149.1453294100
Alpha Script PhishLabs https://info.phishlabs.com/hubfs/Decrypter_Blog_Images_8.24/ALDecrypter_1.cs?__hstc=61627571.34612af1cd87864cf7162095872571d1.1472135921345.1472135921345.1472140656779.2&__hssc=61627571.1.1472593507113&__hsfp=1114323283&hsCtaTracking=22f2fe97-c748-4d6a-9e1e-ba3fb1060abe%7Cd4173312-989b-4721-ad00-8308fff353b3
Al-Namrood Tool Emsisoft https://decrypter.emsisoft.com/al-namrood
Apocalypse Tool Emsisoft https://decrypter.emsisoft.com/apocalypse
ApocalypseVM Tool Emsisoft https://decrypter.emsisoft.com/apocalypsevm
Aura Tool Kaspersky http://media.kaspersky.com/utilities/VirusUtilities/EN/RakhniDecryptor.zip?_ga=1.69588624.1814211149.1453294100
AutoIt Tool Kaspersky http://media.kaspersky.com/utilities/VirusUtilities/EN/RakhniDecryptor.zip?_ga=1.69588624.1814211149.1453294100
Autolocky Tool Emsisoft https://decrypter.emsisoft.com/autolocky
BadBlock Tool AVG http://www.avg.com/us-en/ransomware-decryption-tools#badblock
Bart Tool AVG http://www.avg.com/us-en/ransomware-decryption-tools#bart
Bitman Tool Kaspersky http://media.kaspersky.com/utilities/VirusUtilities/EN/RakhniDecryptor.zip?_ga=1.69588624.1814211149.1453294100
Chimera Tool Kaspersky http://media.kaspersky.com/utilities/VirusUtilities/EN/RakhniDecryptor.zip?_ga=1.69588624.1814211149.1453294100
CoinVault Tool Nomoransom https://noransom.kaspersky.com/static/CoinVaultDecryptor.zip
Cryakl Tool Kaspersky http://media.kaspersky.com/utilities/VirusUtilities/RU/rannohdecryptor.zip?_ga=1.69588624.1814211149.1453294100
Crybola Tool Kaspersky http://media.kaspersky.com/utilities/VirusUtilities/RU/rannohdecryptor.zip?_ga=1.69588624.1814211149.1453294100
CrypBoss Tool Emsisoft https://decrypter.emsisoft.com/crypboss
Crypt38 Key Fortinet Look in your %Appdata%\Microsoft\Windows\request.bin directory
Crypt888 Tool AVG http://www.avg.com/us-en/ransomware-decryption-tools#crypt888
CryptInfinite Tool Emsisoft https://decrypter.emsisoft.com/download/cryptinfinite
CryptoDefense Tool Emsisoft https://decrypter.emsisoft.com/download/cryptodefense
Cryptokluchen Tool Kaspersky http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.exe
CryptXXX Tool Kaspersky http://media.kaspersky.com/utilities/VirusUtilities/RU/rannohdecryptor.zip?_ga=1.69588624.1814211149.1453294100
CryptXXX v2 Tool Kaspersky https://blog.kaspersky.com/cryptxxx-decryption-20/12091/
DeCrypt Tool Emsisoft http://tmp.emsisoft.com/fw/decrypt_mblblock.exe
DecryptorMax Tool Emsisoft https://decrypter.emsisoft.com/download/cryptinfinite
Democry Tool Kaspersky http://media.kaspersky.com/utilities/VirusUtilities/EN/RakhniDecryptor.zip?_ga=1.69588624.1814211149.1453294100
DMALocker2 Tool Emsisoft https://decrypter.emsisoft.com/dmalocker2
Fabiansomware Tool Emsisoft https://decrypter.emsisoft.com/fabiansomware
FenixLocker Tool Emsisoft https://decrypter.emsisoft.com/download/fenixlocker
Fury Tool Kaspersky https://support.kaspersky.com/viruses/disinfection/8547?_ga=1.40544614.514919628.1477257013#block1
Globe Tool Emsisoft https://decrypter.emsisoft.com/globe
Globe2 Tool TechForum http://sensorstechforum.com/remove-globe2-ransomware-decrypt-encrypted-files/
Gomasom Tool Emsisoft https://decrypter.emsisoft.com/download/gomasom
Harasom Tool Emsisoft https://decrypter.emsisoft.com/download/harasom
HydraCrypt Tool Emsisoft http://emsi.at/DecryptHydraCrypt
Jigsaw Tool MalwareHunterTeam http://www.bleepingcomputer.com/download/jigsaw-decrypter/
KeyBTC Tool Emsisoft https://decrypter.emsisoft.com/harasom
Lamer Tool Kaspersky http://media.kaspersky.com/utilities/VirusUtilities/EN/RakhniDecryptor.zip?_ga=1.69588624.1814211149.1453294100
LeChiffre Tool Emsisoft https://decrypter.emsisoft.com/download/lechiffre
LECHIFFRE Tool TrendMicro http://solutionfile.trendmicro.com/SolutionFile/EN-1114221/RansomwareFileDecryptor%201.0.1652%20MUI.zip
Legion Tool AVG http://www.avg.com/us-en/ransomware-decryption-tools#legion
Linux Encoder 1 Tool BitDefender http://labs.bitdefender.com/2015/11/linux-ransomware-debut-fails-on-predictable-encryption-key/
Locker Key Poka BrightMinds http://pastebin.com/1WZGqrUH
Lortok Tool Kaspersky http://media.kaspersky.com/utilities/VirusUtilities/EN/RakhniDecryptor.zip?_ga=1.69588624.1814211149.1453294100
MirCop Tool TrendMicro http://solutionfile.trendmicro.com/SolutionFile/EN-1114221/RansomwareFileDecryptor%201.0.1652%20MUI.zip
Nemucod Tool Emsisoft https://decrypter.emsisoft.com/download/nemucod
NoobCrypt Key Jakub Kroustek ZdZ8EcvP95ki6NWR2j or lsakhBVLIKAHg
Operation Global III Tool Nathan Scott http://download.bleepingcomputer.com/Nathan/og3patcher.exe
PCLock Tool Emsisoft https://decrypter.emsisoft.com/download/pclock
Peyta Tool Leostone https://github.com/leo-stone/hack-petya
Philadelphia Tool Emsisoft https://decrypter.emsisoft.com/download/philadelphia
Pletor Tool Kaspersky https://www.nomoreransom.org/decryption-tools.html
Radamant Tool Emsisoft https://decrypter.emsisoft.com/download/radamant
Rakhni Tool Kaspersky https://www.nomoreransom.org/decryption-tools.html
Rannoh Tool Kaspersky https://support.kaspersky.com/viruses/disinfection/8547?_ga=1.40544614.514919628.1477257013#block1
Rotor Tool Kaspersky http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.exe
Shade Tool Intel http://www.mcafee.com/us/downloads/free-tools/termsofuse.aspx?url=http://downloadcenter.mcafee.com/products/mcafee-avert/shadedecrypt/shadedecrypt.exe
SNSLocker Tool TrendMicro http://solutionfile.trendmicro.com/SolutionFile/EN-1114221/RansomwareFileDecryptor%201.0.1652%20MUI.zip
Stampado Tool TrendMicro http://solutionfile.trendmicro.com/SolutionFile/EN-1114221/RansomwareFileDecryptor%201.0.1652%20MUI.zip
SZFlocker Tool AVG http://www.avg.com/us-en/ransomware-decryption-tools#szflocker
TeslaCrypt Tool Cisco https://github.com/Googulator/TeslaCrack
TorLocker Tool Kaspersky http://support.kaspersky.com/viruses/disinfection/11718
UmbreCrypt Tool Emsisoft http://blog.emsisoft.com/2016/02/12/decrypter-for-hydracrypt-and-umbrecrypt-available/
WildFire Tool Intel http://www.mcafee.com/us/downloads/free-tools/wildfiredecrypt.aspx
XORBAT Tool TrendMicro http://solutionfile.trendmicro.com/SolutionFile/EN-1114221/RansomwareFileDecryptor%201.0.1652%20MUI.zip
Xorist Tool Emsisoft https://decrypter.emsisoft.com/download/xorist

For more news and information on the battle against ransomware, visit the FightRansomware.com homepage today.

 

 

Recommend
  • Facebook
  • Twitter
  • Google +
  • LinkedIN
  • Pinterest
Share