Ransomeware Decrypters Available Decryption Service – Decryptor Download Decrypt Files

New version of ODCODCDecoder Released Download Decrypter

BloodDolly has released a new version of his ODCODC Ransomwaredecryptor. The decryptor can be downloaded from.

Emsisoft Decrypter for Marlboro Download Decrypter

The Marlboro ransomware was first seen on January 11th, 2017. It is written in C++ and uses a simple XOR-based encryption algorithm. Encrypted files are renamed to “.oops”. The ransom note is stored inside a file named “_HELP_Recover_Files_.html” and includes no further point of contact.

Due to a bug in the malware’s code, the malware will truncate up to the last 7 bytes from files it encrypts. It is, unfortunately, impossible for the decrypter to reconstruct these bytes.

To use the decrypter, you will require an encrypted file of at least 640 bytes in size as well as its unencrypted version. To start the decrypter select both the encrypted and unencrypted file and drag and drop them onto the decrypter executable.

Decryptor released for the Merry Christmas or Merry X-Mas Ransomware Download Decrypter

Fabian Wosar has done it again and released a decryptor for the files encrypted by the Merry Christmas or Merry X-Mas Ransomware. These files will have the extensions .PEGS1, .MRCR1, .RARE1, .RMCM1 appended to them.

Crypt38Decrypter Download Download Decrypter

BitStakDecrypter Download Download Decrypter

lphaDecrypter Download Download Decrypte

Unlock92Decrypter Download Download Decrypter

Hidden Tear Decrypter Download Download Decrypter

Hidden Tear BruteForcer Download Download Decrypter

PowerLockyDecrypter Download Download Decrypter

GhostCryptDecrypter Download Download Decrypter

MicroCop Decryptor Download Download Decrypter

Jigsaw Decrypter Download Download Decrypter

Rannoh Decryptor (updated 20-12-2016 with CryptXXX v3) Download Decrypter

RannohDecryptor tool is designed to decrypt files encrypted by:

  • CryptXXX versions 1, 2 and 3.
  • Marsjoke aka Polyglot;
  • Rannoh;
  • AutoIt;
  • Fury;
  • Crybola;
  • Cryakl;

Globe3 Decryptor Download Decrypter
The tool is designed to decrypt files encrypted by Globe3 Ransomware.

Derialock Decryptor Download Decrypter
Derialock decryptor tool is designed to decrypt files encrypted by Derialock

PHP Ransomware Decryptor Download Decrypter
PHP ransomware decryptor tool is designed to decrypt files encrypted by PHP ransomware

WildFire Decryptor Download Decrypter
WildfireDecryptor tool is designed to decrypt files encrypted by Wildfire

Chimera Decryptor Download Decrypter
ChimeraDecryptor tool is designed to decrypt files encrypted by Chimera

Teslacrypt Decryptor Download Decrypter
TeslaDecryptor can decrypt files encrypted by TeslaCrypt v3 and v4

Shade Decryptor Download Decrypter
ShadeDecryptor can decrypt files with the following extensions: .xtbl, .ytbl, .breaking_bad, .heisenberg.

CoinVault Decryptor Download Decrypter

The CoinVault decryption tool decrypts files encrypted by Coinvault and Bitcryptor.

Rakhni Decryptor (updated 14-11-2016) Download Decrypter

RakhniDecryptor tool is designed to decrypt files encrypted by:

  • Crysis;
  • Chimera;
  • Rakhni;
  • Agent.iih;
  • Aura;
  • Autoit;
  • Pletor;
  • Rotor;
  • Lamer;
  • Lortok;
  • Cryptokluchen;
  • Democry;
  • Bitman (TeslaCrypt) version 3 and 4.

Trend Micro Ransomware File Decryptor Download Decrypter

Supported Ransomware Families

The following list describes the known ransomware-encrypted files types can be handled by the latest version of

the tool.

Ransomware

File name and extension

CryptXXX V1, V2, V3*

{original file name}.crypt, cryp1, crypz, or 5 hexadecimal characters

CryptXXX V4, V5

{MD5 Hash}.5 hexadecimal characters

Crysis

.{id}.{email address}.xtbl, crypt

TeslaCrypt V1**

{original file name}.ECC

TeslaCrypt V2**

{original file name}.VVV, CCC, ZZZ, AAA, ABC, XYZ

TeslaCrypt V3

{original file name}.XXX or TTT or MP3 or MICRO

TeslaCrypt V4

File name and extension are unchanged

Rating:

485 found this helpful

Category:

Troubleshoot

Solution Id:

1114221

13/12/2016, 22)42

Using the Trend Micro Ransomware File Decryptor Tool

Page 2 of 6

https://success.trendmicro.com/solution/1114221#

#

TeslaCrypt V4

File name and extension are unchanged

SNSLocker

{Original file name}.RSNSLocked

AutoLocky

{Original file name}.locky

BadBlock

{Original file name}

777

{Original file name}.777

XORIST

{Original file name}.xorist or random extension

XORBAT

{Original file name}.crypted

CERBER V1

{10 random characters}.cerber

Stampado

{Original file name}.locked

Nemucod

{Original file name}.crypted

Chimera

{Original file name}.crypt

LECHIFFRE

{Original file name}.LeChiffre

MirCop

Lock.{Original file name}

Jigsaw

{Original file name}.random extension

Globe/Purge

V1: {Original file name}.purge

V2: {Original file name}.{email address + random characters}

V3: Extension not fixed or file name encrypted

DXXD

V1: {Original file name}.{Original extension}dxxd

Teamxrat/Xpan

V2: {Original filename}.__xratteamLucked

Crysis

.{id}.{email address}.xtbl, crypt

NMoreira Decryptor download
The tool is designed to decrypt files encrypted by NMoreira Ransomware.

Ozozalocker Decryptor download
The tool is designed to decrypt files encrypted by Ozozalocker Ransomware.

Globe Decryptor download
The tool is designed to decrypt files encrypted by Globe Ransomware.

Globe2 Decryptor download
The tool is designed to decrypt files encrypted by Globe2 Ransomware.

FenixLocker Decryptor download
The tool is designed to decrypt files encrypted by FenixLocker Ransomware.

Philadelphia Decryptor download
The tool is designed to decrypt files encrypted by Philadelphia Ransomware.

Stampado Decryptor download
The tool is designed to decrypt files encrypted by Stampado Ransomware.

Xorist Decryptor download
The tool is designed to decrypt files encrypted by Xorist Ransomware.

Nemucod Decryptor download
The tool is designed to decrypt files encrypted by Nemucod Ransomware.

Gomasom Decryptor download
The tool is designed to decrypt files encrypted by Gomasom Ransomware.

Linux.Encoder Decryptor download

Decryption tools have been designed for infections of the Linux.Encoder.1 and Linux.Encoder.3 ransomware