RANSOMWARE DECRYPTOR
Welcome to NoRansom, your home for decryption tools and education on ransomware. Ransomware is malware that locks your computer or encrypts your files. You can’t get the data back unless you pay a ransom, and even if you do, there’s no guarantee that you’ll get your data back.
Before downloading and starting the solution, read the how-to guide. Make sure you remove the malware (you can use Kaspersky Internet Security) from your system first, otherwise it will repeatedly lock your system or encrypt files.
WildfireDecryptor tool is designed to decrypt files affected by Wildfire.
For more information please see this how-to guide.
ShadeDecryptor tool is designed to decrypt files affected by Shade version 1 and version 2.
For more information please see this how-to guide.
RakhniDecryptor tool is designed to decrypt files affected by Rakhni, Agent.iih, Aura, Autoit, Pletor, Rotor, Lamer, Lortok, Cryptokluchen, Democry, Bitman (TeslaCrypt) version 3 and 4, Chimera.
For more information please see this how-to guide.
RannohDecryptor tool is designed to decrypt files affected by Rannoh, AutoIt, Fury, Crybola, Cryakl, CryptXXX versions 1 and 2 (files encrypted by Trojan-Ransom.Win32.CryptXXX version 3 are detected, but not decrypted).
For more information please see this how-to guide.
CoinVaultDecryptor tool is designed to decrypt files affected by CoinVault and Bitcryptor. The National High Tech Crime Unit (NHTCU) of the Netherlands’ police, Netherlands’ National Prosecutors & Kaspersky helped create this tool.
For more information please see this how-to guide.
XoristDecryptor tool is designed to decrypt files affected by Xorist and Vandev.
For more information please see this how-to guide.