Ransomware decryptor

Welcome to NoRansom, your home for decryption tools and education on ransomware.
Ransomware is malware that locks your computer or encrypts your files. You can’t get the data back unless you pay a ransom, and even if you do, there’s no guarantee that you’ll get your data back.

Before downloading and starting the solution, read the how-to guide. Make sure you remove the malware (you can use Kaspersky Internet Security) from your system first, otherwise it will repeatedly lock your system or encrypt files.

Eliminate Wildfire

WildfireDecryptor tool is designed to decrypt files affected by Wildfire.

For more information please see this how-to guide.

Combat Shade

ShadeDecryptor tool is designed to decrypt files affected by Shade version 1 and version 2.

For more information please see this how-to guide.

Fight Rakhni & Friends

RakhniDecryptor tool is designed to decrypt files affected by Rakhni, Agent.iih, Aura, Autoit, Pletor, Rotor, Lamer, Lortok, Cryptokluchen, Democry, Bitman (TeslaCrypt) version 3 and 4, Chimera.

For more information please see this how-to guide.

Smash Rannoh & Co

RannohDecryptor tool is designed to decrypt files affected by Rannoh, AutoIt, Fury, Crybola, Cryakl, CryptXXX versions 1 and 2 (files encrypted by Trojan-Ransom.Win32.CryptXXX version 3 are detected, but not decrypted).

For more information please see this how-to guide.

Destroy CoinVault

CoinVaultDecryptor tool is designed to decrypt files affected by CoinVault and Bitcryptor. The National High Tech Crime Unit (NHTCU) of the Netherlands’ police, Netherlands’ National Prosecutors & Kaspersky helped create this tool.

For more information please see this how-to guide.

Kill Xorist

XoristDecryptor tool is designed to decrypt files affected by Xorist and Vandev.

For more information please see this how-to guide.