6 Decryptors to Recover Your Data Affected by Ransomware

Share Button
6 Decryptors to Recover Your Data Affected by Ransomware by Kumar Jishu

6 Decryptors to Recover Your Data Affected by Ransomware by Kumar Jishu

2017 was the year of ransomware. Global ransomware cost has increased 15 times in a period of two years. In 2017, in just 4 days, $1 billion in damages were caused by the WannaCry outbreak. Global ransomware costs are expected to cross the mark of $5 billion this year.

While a huge number of ransomwares are being created by the cybercriminal on a daily basis, Cyber-experts are providing us free decryptors, which can help you recover the affected files without paying a bitcoin to these criminals.

Before you use the decryptors given below, it is important that you have removed the threat from your computer and install an antivirus to avoid the re-entrance of ransomware into your system.

If the decryptor is not available here, here’s what you can do:

  1. Try restoring the lost files.
  2. If restoring doesn’t work, back up the decrypted files and wait for its decryption software.

note: Make sure you carefully read the instructions on download page before you continue!

Here are the 6 decryptors that can help you recover your affected data:

 

EMSISOFT Decryptor:

The following files can be decrypted using this tool:

Ransomware
Ransom notes
Extensions of encrypted files
Amnesia
HOW TO RECOVER ENCRYPTED FILES.TXT
-
Cry128 .fgb45ft3pqamyji7.onion.to._, .id_<id>_gebdp3k7bolalnd4.onion._, .id_<id>_2irbar3mjvbap6gt.onion.to._ and .id-<id>_[qg6m5wo7h3id55ym.onion.to].63vc4
Cry9 .-juccy[a]protonmail.ch, .id-, .id-_[nemesis_decryptor@aol.com].xj5v2, .id-_r9oj, .id-_x3m, .id-_[x3m-pro@protonmail.com]_[x3m@usa.com].x3m, ., .-sofia_lobster[a]protonmail.ch and ._[wqfhdgpdelcgww4g.onion.to].r2vy6
Damage damage@india.com[].txt .damage
CryptON aka Nemesis aka X3M .id-_locked, .id-_locked_by_krec, .id-_locked_by_perfect, .id-_x3m, .id-_r9oj, .id-_garryweber@protonmail.ch, .id-_steaveiwalker@india.com_, .id-_julia.crown@india.com_, .id-_tom.cruz@india.com_, .id-_CarlosBoltehero@india.com_,

.id-_maria.lopez1@india.com_

Marlboro _HELP_Recover_Files_.html .oops
MRCR YOUR_FILES_ARE_DEAD.HTA
MERRY_I_LOVE_YOU_BRUCE.HTA
.PEGS1 .MRCR1 .RARE1 .MERRY .RMCM1
Globe3 How To Recover Encrypted Files.hta .decrypt2017 .hnumkhotep (and others)
OpenToYou !!!.txt .-opentoyou@india.com
GlobeImposter HOW_OPEN_FILES.hta .crypt
NMoreira Recupere seus arquivos. Leia-me!.txt
How to decrypt your files.txt
.maktub .__AiraCropEncrypted!
OzozaLocker HOW TO DECRYPT YOU FILES.txt .locked
Globe2 .raid10 .blt .globe .encrypted .[mia.kokers@aol.com] (and others)
Globe .purge .globe .okean-1955@india.com.!dsvgdfvdDVGR3SsdvfEF75sddf#xbkNY45fg6}P{cg.xtbl (and others)
Al-Namrood .Read_Me.Txt .unavailable .disappeared
FenixLocker CryptoLocker.txt
Help to decrypt.txt
.centrumfr@india.com!!
Fabiansomware .How_To_Decrypt_Your_Files.txt .encrypted
Philadelphia .locked
Stampado .locked
Apocalypse .How_To_Decrypt.txt
.Where_my_files.txt
.How_to_Recover_Data.txt
.Contact_Here_To_Recover_Your_Files.txt
.encrypted .FuckYourData .Encryptedfile .SecureCrypted
BadBlock Help Decrypt.html (files are not renamed)
Xorist HOW TO DECRYPT FILES.txt .EnCiPhErEd .0JELvV .p5tkjw .6FKR8d .UslJ6m .n1wLp0 .5vypSa .YNhlv1
777 .777
AutoLocky info.txt
info.html
.locky
Nemucod DECRYPT.txt .crypted
DMALocker2 (files are not renamed)
HydraCrypt .hydracrypt .umbrecrypt
DMALocker (files are not renamed)
CrypBoss .crypt .R16M01D05
Gomasom (file name contains an email address to contact) .crypt
LeChiffre (asks you to contact decrypt.my.files@gmail.com) .LeChiffre
KeyBTC DECRYPT_YOUR_FILES.txt (contact keybtc@inbox.com)
Radamant .rdm .rrk
CryptInfinite .CRINF
PClock enc_files.txt (files are not renamed)
CryptoDefense HOW_DECRYPT.txt
Harasom (pretends to be from Spamhaus or the US Department of Justice) .html

 

OG3 Patcher

The following files can be decrypted using this tool:

Ransomware Ransom notes Extensions of encrypted files
Operation Global III (displays lock screen) .exe

Trend Micro Ransomware File Decryptor

The following files can be decrypted using this tool:

Ransomware Extensions of encrypted files
CryptXXX V1, V2, V3 .crypt .cryp1 .crypz (or 5 hexadecimal characters)
CryptXXX V4, V5 b787d22d9cb06342658bf546039117bc.12345 (and similar)
Crysis .xtbl .crypt
TeslaCrypt V1 .ECC
TeslaCrypt V2 .VVV .CCC .ZZZ .AAA .ABC .XYZ
TeslaCrypt V3 .XXX .TTT .MP3 .MICRO
TeslaCrypt V4 (files are not renamed)
SNSLocker .RSNSLocked
AutoLocky .locky
BadBlock (files are not renamed)
777 .777
XORIST .xorist (and others)
XORBAT .crypted
CERBER V1 .cerber
Stampado .locked
Nemucod .crypted
Chimera .crypt
LECHIFFRE .LeChiffre
MirCop Lock.
Jigsaw (uses random extensions)
Globe/Purge .purge (or other random extensions)
DXXD dxxd
Teamxrat/Xpan .__xratteamLucked
Crysis .xtbl .crypt
DemoTool .demoadc

Free Ransomware Decryption Tools by Avast

The following files can be decrypted using this tool:

Ransomware Ransom notes Extensions of encrypted files
Alcatraz Locker ransomed.html .Alcatraz
Apocalypse .How_To_Decrypt.txt
.README.Txt
.Contact_Here_To_Recover_Your_Files.txt
.How_to_Recover_Data.txt
.Where_my_files.txt
.encrypted .FuckYourData .locked .Encryptedfile .SecureCrypte
BadBlock Help Decrypt.html (files are not renamed)
Bart recover.bmp
recover.txt
.bart.zip
Crypt888 (Mircop) (changes your wallpaper) Lock.
CrySiS Decryption instructions.txt
Decryptions instructions.txt
README.txt
.xtbl .CrySiS
CryptoMix (Offline) (CryptFile2/Zeta) HELP_DECRYPT_YOUR_FILES.txt
# RESTORING FILES #.txt
.CRYPTOSHIELD .rdmk .lesli .scl .code .rmd .rscl
Globe How to restore files.hta
Read Me Please.hta
.ACRYPT .GSupport[0-9] .blackblock .dll555 .duhust .exploit .frozen .globe .gsupport .kyra .purged .raid[0-9] .siri-down@india.com .xtbl .zendrz .zendr[0-9]
HiddenTear READ_IT.txt
MSG_FROM_SITULA.txt
DECRYPT_YOUR_FILES.HTML
.locked .34xxx .bloccato .BUGSECCCC .Hollycrypt .lock .saeid .unlockit .razy .mecpt .monstro .lok .암호화됨 .8lock8 .fucked .flyper .kratos .krypted .CAZZO .doomed
Jigsaw (displays a window) .kkk .btc .gws .J .encrypted .porno .payransom .pornoransom .epic .xyz .versiegelt .encrypted .payb .pays .payms .paymds .paymts .paymst .payrms .payrmts .paymrts .paybtcs .fun .hush .uk-dealer@sigaint.org .gefickt.
Legion (changes your wallpaper) .legion .cbf
NoobCrypt ransomed.html (files are not renamed)
Stampado (displays a window) .locked
SZFLocker (message in Polish language) .szf
TeslaCrypt (files are not renamed)

Kaspersky Ransomware Decryptor

The following files can be decrypted using this tool:

Ransomware Extensions of encrypted files
Rannoh locked-
Cryakl CRYPTENDBLACKDC
AutoIt (random extensions)
CryptXXX V1, V2, V3 .crypt .crypz .cryp1
Polyglot
Shade V1, V2 .xtbl .ytbl .breaking_bad .heisenberg
Democry 2777 .legion
Bitman V3, V4 .xxx .ttt .micro .mp3 (or left unchanged)
Lobzik .fun .gws .btc .porno .AFD .pornoransom .epic .encrypted .J .payransom .paybtcs .paymrss .paymrts .paymst .paymts .payrms
Mircop Lock.
Crusis .xtbl .CrySiS
Rakhni
Agent.iih
Aura
Pletor
Rotor
Lamer
Lortok
Cryptokluchen
Chimera
Wildfire .wflx
CoinVault
Bitcryptor
Vandev
Xorist

WanaKiwi Ransomware Decryptor

The following files can be decrypted using this tool:

Ransomware Extensions of encrypted files
WannaCry (WannaCryptor) .WCRY .WNCRY .WNCRYT

 

 

 

Leave a comment


Be the first to comment