Ransomware · Decryptors
Total
163
Active
156
Groups Covered
161
777 · by Trend Micro
Designed to decrypt files encrypted by 777 Ransom.
777 ransom · by Trend Micro
Trend Micro Ransomware Decryptor is designed to decrypt files encrypted by 777 Ransom.
Agent.iih · by Kaspersky Lab
Designed to decrypt files encrypted by Agent.iih Ransom.
Annabelle · by Bitdefender
Designed to decrypt files encrypted by Annabelle Ransom.
AstraLocker · by Emsisoft
Designed to decrypt files encrypted by AstraLocker Ransom.
AtomSilo · by Avast
Designed to decrypt files encrypted by AtomSilo Ransom.
AutoLocky · by Trend Micro
Designed to decrypt files encrypted by AutoLocky Ransom.
BadBlock · by Trend Micro
Designed to decrypt files encrypted by BadBlock Ransom.
BigBobRoss · by Emsisoft
Designed to decrypt files encrypted by BigBobRoss Ransom.
Bitcryptor · by Kaspersky Lab
Designed to decrypt files encrypted by Bitcryptor Ransom.
BlackBasta · by SR Labs
Designed to decrypt files encrypted by BlackBasta Ransom.
CERBER V1 · by Trend Micro
Designed to decrypt files encrypted by CERBER V1 Ransom.
CoinVault · by Kaspersky Lab
Designed to decrypt files encrypted by CoinVault Ransom.
Crypt888 · by Trend Micro
Designed to decrypt files encrypted by Crypt888 Ransom.
DJVU · by Emsisoft
Designed to decrypt files encrypted by DJVU Ransom.
Encryptor RaaS · by Kaspersky Lab
Designed to decrypt files encrypted by Encryptor RaaS Ransom.
FenixLocker · by Emsisoft
Designed to decrypt files encrypted by FenixLocker Ransom.
FilesLocker · by Avast
Designed to decrypt files encrypted by FilesLocker Ransom.
FortuneCrypt · by Kaspersky Lab
Designed to decrypt files encrypted by FortuneCrypt Ransom.
GlobeImposter · by Emsisoft
Designed to decrypt files encrypted by GlobeImposter Ransom.
HermeticRansom · by Avast
Designed to decrypt files encrypted by HermeticRansom.
LambdaLocker · by Avast
Designed to decrypt files encrypted by LambdaLocker Ransom.
MacRansom · by Trend Micro
Designed to decrypt files encrypted by MacRansom Ransom.
NemucodAES · by Emsisoft
Designed to decrypt files encrypted by NemucodAES Ransom.
Ouroboros · by Kaspersky Lab
Designed to decrypt files encrypted by Ouroboros Ransom.
Ozozalocker · by Emsisoft
Designed to decrypt files encrypted by Ozozalocker Ransom.
Philadelphia · by Emsisoft
Designed to decrypt files encrypted by Philadelphia Ransom.
Professeur · by Bitdefender
Designed to decrypt files encrypted by Professeur Ransom.
REvil/Sodinokibi · by Bitdefender
Designed to decrypt files encrypted by REvil/Sodinokibi Ransom.
SNSLocker · by Trend Micro
Designed to decrypt files encrypted by SNSLocker Ransom.
TargetCompany · by Avast
Designed to decrypt files encrypted by TargetCompany Ransom.
TeslaCrypt · by ESET
Designed to decrypt files encrypted by TeslaCrypt Ransom (all versions).
TurkStatic · by Emsisoft
Designed to decrypt files encrypted by TurkStatic Ransom.
WannaCryFake · by Emsisoft
Designed to decrypt files encrypted by WannaCryFake Ransom.
Wildfire · by Kaspersky Lab
Designed to decrypt files encrypted by Wildfire Ransom.
XORBAT · by Trend Micro
Designed to decrypt files encrypted by XORBAT Ransom.
aes_ni ransom · by Kaspersky Lab
RakhniDecryptor is a tool provided by Kaspersky to decrypt files encrypted by Trojan-Ransom.Win32.Rakhni.
aes_ni ransom · by Avast
AES_NI Decryptor is designed to decrypt files encrypted by AES_NI Ransom.
al-namrood · by Emsisoft · 2016-09-28
Decryptor for Al-Namrood ransomware, a fork of Apocalypse that targets servers with RDP enabled. Encrypted files renamed to *.unavailable or *.disappeared.
apocalypse · by Emsisoft · 2016-06-12
Decryptor for Apocalypse ransomware. Files encrypted with extensions like .encrypted, .FuckYourData, .Encryptedfile, .SecureCrypted.
apocalypsevm · by Emsisoft · 2016-06-18
Decryptor for ApocalypseVM variant. Requires an encrypted file of at least 4096 bytes and its unencrypted version.
avaddon · by Emsisoft · 2021-06-14
Free decryptor after group shutdown and key release
babuk · by Avast · 2021-06-01
Decryption tool for Babuk ransomware after source code leak
checkmail7 · by Emsisoft · 2020-08-06
Decryptor for CheckMail7 ransomware that appends the extension [checkmail7@protonmail.com].
crypboss · by Emsisoft · 2016-03-01
Decryptor for CrypBoss, HydraCrypt and UmbreCrypt ransomware families.
cryptinfinite · by Emsisoft · 2016-01-01
Decryptor for CryptInfinite (DecryptorMax) ransomware.
cryptodefense · by Emsisoft · 2014-04-01
Decryptor for CryptoDefense ransomware that uses RSA-2048 encryption.
cyborg · by Emsisoft · 2019-11-01
Decryptor for Cyborg ransomware that appends .petra extension.
decrypt protect · by Emsisoft · 2016-01-01
Decryptor for DeCrypt Protect ransomware.
derialock · by Emsisoft · 2016-12-01
Decryptor for Derialock ransomware that encrypts files and demands Bitcoin payment.
fabiansomware · by Emsisoft · 2016-07-01
Decryptor for Fabiansomware (Apocalypse variant) ransomware.
galacticryper · by Emsisoft · 2017-01-01
Decryptor for GalactiCryper ransomware.
gandcrab · by Bitdefender · 2019-06-17
Free decryption tool for GandCrab ransomware versions 1, 4, 5.0.1 through 5.2
goldeneye · by Emsisoft · 2016-12-01
Decryptor for GoldenEye ransomware (Petya/Mischa combination).
gomasom · by Emsisoft · 2015-12-01
Decryptor for Gomasom ransomware that inserts random email addresses into filenames.
hydracrypt · by Emsisoft · 2016-02-01
Decryptor for HydraCrypt ransomware using AES encryption.
lechiffre · by Emsisoft · 2016-01-01
Decryptor for LeChiffre ransomware that uses Blowfish encryption.
linux.encoder · by Emsisoft · 2015-11-01
Decryptor for Linux.Encoder ransomware targeting Linux web servers.
marlboro · by Emsisoft · 2017-01-01
Decryptor for Marlboro ransomware using weak XOR encryption.
marsjoke · by Emsisoft · 2016-09-01
Decryptor for Marsjoke (Polyglot) ransomware that mimics CTB-Locker.
maze · by Emsisoft · 2022-02-09
Decryptor for Maze, Sekhmet, and Egregor after master key leak
megalocker · by Emsisoft · 2019-04-01
Decryptor for MegaLocker (NamPoHyu) ransomware targeting Samba servers.
merry christmas · by Emsisoft · 2017-01-01
Decryptor for Merry X-Mas/MRCR ransomware.
mircop · by Emsisoft · 2016-06-01
Decryptor for MirCop ransomware that accuses victims of downloading illegal content.
muhstik · by Emsisoft · 2019-10-01
Decryptor for Muhstik ransomware targeting QNAP NAS devices.
nullbyte · by Emsisoft · 2016-08-01
Decryptor for NullByte ransomware (SilentShield variant).
petya · by Emsisoft · 2016-04-01
Decryptor for original Petya ransomware that encrypts the MBR and MFT.
pletor · by Emsisoft · 2014-06-01
Decryptor for Pletor ransomware targeting Android devices.
radamant · by Emsisoft · 2015-12-01
Decryptor for Radamant ransomware using AES-256 encryption.
ragnarok · by Emsisoft · 2021-08-26
Free decryptor released after group shutdown and key release
ransomwared · by Emsisoft · 2019-12-01
Decryptor for Ransomwared ransomware that appends .ransomwared extension.
redrum · by Emsisoft · 2020-06-04
Decryptor for RedRum ransomware which encrypts files using AES256 GCM and RSA-1024. Also works for Thanos variant.
revil · by Bitdefender · 2021-09-16
Universal decryptor for REvil ransomware, works for infections before July 13, 2021
shade · by Kaspersky · 2020-04-28
Decryption tool after group released 750,000 keys
spartcrypt · by Emsisoft · 2020-07-07
Decryptor for SpartCrypt ransomware using AES-128. Also works for CoronaCrypt variant.
stampado · by Emsisoft · 2016-07-22
Decryptor for Stampado ransomware kit. Written in AutoIt, encrypts files using AES-256 and renames to *.locked.
stop puma · by Emsisoft · 2019-10-18
Decryptor for STOP Puma ransomware variant. Appends .puma, .pumas, .pumax, .INFOWAIT or .DATAWAIT extensions.
synack · by Emsisoft · 2021-08-13
Decryption tool after El_Cometa rebranding and key release
szflocker · by Emsisoft · 2016-05-01
Decryptor for SZFLocker ransomware targeting Polish users.
telecrypt · by Emsisoft · 2016-11-01
Decryptor for Telecrypt ransomware that uses Telegram for C&C communication.
umbrecrypt · by Emsisoft · 2016-03-01
Decryptor for Umbrecrypt (CrypBoss variant) ransomware.
yashma · by Emsisoft · 2022-07-07
Decryptor for Yashma ransomware (also known as AstraLocker 2.0). Based on Chaos ransomware builder, uses AES-128 and RSA-2048.
yatron · by Emsisoft · 2019-03-01
Decryptor for Yatron ransomware based on Hidden Tear source code.
