Free Ransomware Decryptors Collection 2018

[boulawan]

Free Ransomware Decryptors Collection 2018

source:https://www.watchpointdata.com/ransomware-decryptors/

The Definitive Collection of Ransomware Decryption Tools on the Web

Ransomware attacks can be crippling if they happen to you. If you’re hit by ransomware, don’t just pay the ransom. Here is a list of steps you need to take:

1. Download our ransomware response kit
2. Utilize the free ransomware decrypter tools listed below
3. Try to restore from a backup
4. Protect yourself from future attacks with CryptoStopper™

WatchPoint has scoured the web and created the largest collection of ransomware decryptors and decryption tools available. These tools may help you to decrypt your files without having to pay the ransom. This list is updated regularly so if the decrypter or tool you need isn’t available check back in the future and it may be available.

Feel free to contact us if you have questions about these tools or have been subject to an attack and need help figuring out what to do next.

Search:

Decryptor Download	Read Me	Encrypted File Extension
Derialock	Instructions	.deria
PHP	Instructions
BarRax	Instructions
PizzaCrypts
ODCODC
Cryptorbit	Instructions	locks files and creates HowDecrypt.txt and HowDecrypt.gif
TorrentLocker		*.encrypted, *.enc
TeslaCrypt	Instructions	*.xxx, *.ttt, *.micro, *.mp3
Virlock	Instructions
Apocalypse	Instructions	*.encrypted, *.FuckYourData, *.Encryptedfile, *.SecureCrypted
ApocalypseVM	Instructions	*.encrypted, *.FuckYourData, *.Encryptedfile, *.SecureCrypted
MirCop	Instructions	Lock.{Original file name}
Alcatraz Locker	Instructions	*.Alcatraz
Apocalypse	Instructions	*.encrypted, *.FuckYourData, *.Encryptedfile, *.SecureCrypted
ApocalypseVM	Instructions	*.encrypted, *.FuckYourData, *.Encryptedfile, *.SecureCrypted
BadBlock	64-bit	Doesn't change file extension. Look for BadBlock in ransom note
BadBlock	32-bit	Doesn't change file extension. Look for BadBlock in ransom note
Bart	Instructions	*.bart.zip
Crypt888	Instructions	This ransomware adds Lock. to the beginning of file names
CryptFile2		*.CRYPTOSHIELD, *.rdmk, *.lesli, *.scl, *.code, *.rmd *.rscl
CryptoMix	Instructions	*.CRYPTOSHIELD, *.rdmk, *.lesli, *.scl, *.code, *.rmd *.rscl
CryptoShield	Instructions
Zeta	Instructions	*.CRYPTOSHIELD, *.rdmk, *.lesli, *.scl, *.code, *.rmd *.rscl
Creator/Contributor Avast
Zeta	Instructions	*.CRYPTOSHIELD, *.rdmk, *.lesli, *.scl, *.code, *.rmd *.rscl
Crysis	Instructions	id}.{email address}.xtbl, crypt
Globe	Instructions	*.ACRYPT, *.GSupport[0-9], *.blackblock, *.dll555, *.duhust, *.exploit, *.frozen, *.globe, *.gsupport,   *.kyra, *.purged, *.raid[0-9], *[email protected], *.xtbl, *.zendrz, *.zendr[0-9], *.hnyear
HiddenTear	Instructions	*.locked, *.34xxx, *.bloccato, *.BUGSECCCC, *.Hollycrypt, *.lock, *.saeid, *.unlockit,   *.razy, *.mecpt, *.monstro, *.lok, *.암호화됨, *.8lock8, *.fucked, *.flyper, *.kratos, *.krypted, *.CAZZO, *.doomed.
Jigsaw	Instructions	.FUN, .KKK,  .GWS, .BTC
Legion	Instructions	[email protected]$.legion   or [email protected]$.cbfto the end of filename
NoobCrypt	Instructions
Stampado	Instructions	*.locked
SZFLocker	Instructions	*.szf
TeslaCrypt	Instructions
Linux.Encoder.1
Linux.Encoder.3
AES_NI	Instructions	*.aes_ni, *.aes256, *.aes_ni_0day
Agent.iih	Instructions
Aura	Instructions
AutoIT	Instructions	{Original Filename}@<mail server>_.<random_set_of_characters>.
Bitman v.3	Instructions
Bitman v.4	Instructions
Cerber	Instructions	{10 random characters}.cerber
Chimera	Instructions	{Original file name}.crypt
Cryptokluchen	Instructions
Crysis	Instructions	id}.{email address}.xtbl, crypt
Democry	Instructions	*._date-time_$address@domain$.777 OR *._date-time_$address@domain$.legion
Dharma
Dharma	Instructions	.wallet
Jaff	Instructions	*.Jaff
Lamer	Instructions
Lobzik	Instructions	.fun, .gws, .btc, .AFD, .porno, .pornoransom, .epic, .encrypted, .J, .payransom, .paybtcs, .paymds, .paymrss, .paymrts, .paymst, .paymts, .payrms
Lortok	Instructions
Pletor	Instructions
Rakhni	Instructions	*.locked, *.kraken
Rotor	Instructions
TeslaCrypt v3	Instructions	{original file name}.XXX or TTT or MP3 or MICRO
TeslaCrypt v4	Instructions	File name and extension are unchanged
XData	Instructions	*.~xdata~
AutoLT	Instructions	Renames files "<original_name>@<mail server>_.<random_set_of_characters>"
Cryakl	Instructions	Infected with Trojan-Ransom.Win32.Cryakl also tags end of file name with {CRYPTENDBLACKDC}
Crybola	Instructions	Infected with Trojan-Ransom.Win32.Crybola
CryptXXX v.1-.v3	Instructions	Infected with Trojan-Ransom.Win32.CryptXXX
Fury	Instructions	Infected with  Trojan-Ransom.Win32.Fury
Marsjoke	Instructions
Polyglot	Instructions	Infected with Trojan-Ransom.Win32.Polyglot
Rannoh	Instructions	Renames files "locked-<original_name>.<four_random_letters>"
Shade		*.xtbl, *.ytbl, *.breaking_bad, *.heisenberg.
Troldesh
Wildfire		*.wflx
WannaCry WCRY	Instructions	*.WNCRY, *.WCRY
777	Instructions	{Original file name}.777
AutoLocky	Instructions	{Original file name}.locky
Cerber .v1	Instructions	{10 random characters}.cerber
Chimera	Instructions	{Original file name}.crypt
CryptXXX v.1-v.3	Instructions	{original file name}.crypt, cryp1, crypz, or 5 hexadecimal characters
CryptXXX v.4-.v5	Instructions	{MD5 Hash}.5 hexadecimal characters
DemoTool	Instructions	.demoadc
DXXD v.1	Instructions	{Original file name}.{Original extension}dxxd
Globe .v1	Instructions	{Original file name}.purge
Globe .v2	Instructions	{Original file name}.{email address + random characters}
Globe v.3	Instructions	Extension not fixed or file name encrypted
Jigsaw	Instructions	.FUN, .KKK,  .GWS, .BTC
LeChiffre	Instructions	{Original file name}.LeChiffre
MirCop	Instructions	Lock.{Original file name}
Nemucod	Instructions	{Original file name}.crypted
Purge v.1	Instructions	{Original file name}.purge
Purge v.2	Instructions	{Original file name}.{email address + random characters}
Purge v.3	Instructions	{Original file name}.{email address + random characters}
SNSLocker	Instructions	{Original file name}.RSNSLocked
Stampado	Instructions	*.locked
Teamxrat	Instructions	{Original filename}.__xratteamLucked
TeleCrypt	Instructions	{Original file name}
TeslaCrypt v3	Instructions	{original file name}.XXX or TTT or MP3 or MICRO
TeslaCrypt v4	Instructions	File name and extension are unchanged
XORBAT	Instructions	{Original file name}.crypted
Xorist	Instructions	.xorist (or adds a random extension)
Xpan	Instructions	{Original filename}.__xratteamLucked
BadBlock	Instructions	Doesn't change file extension. Look for BadBlock in ransom note
Vandev		.xorist (or adds a random extension)
Rector		Infected with Trojan-Ransom.Win32.Rector
Scatter		Infected with Trojan-Ransom.BAT.Scatter
Scraper		Infected with Trojan-Ransom.Win32.Scraper
Xorist		.xorist (or adds a random extension)
Decrypt Protect
BadBlock	Instructions	Doesn't change file extension. Look for BadBlock in ransom note
Bart	Instructions	*.bart.zip
Crypt888	Instructions	This ransomware adds Lock. to the beginning of file names
Legion	Instructions	Legion adds a variant of *[email protected]$.legion   or *[email protected]$.cbf to end of filename
SZFLocker	Instructions	*.szf
TeslaCrypt	Instructions	Decryptor for variant that doesn't rename files
Troldesh
TeslaCrypt		*.xxx, *.ttt, *.micro, *.mp3
Wildfire	Instructions	*.wflx
TeslaCrypt
Crysis	Instructions	*.xtbl, *.crysis, *.crypt, *.lock, *.crypted, *.dharma, *.wallet, *.onion
Jigsaw		.FUN, .KKK,  .GWS, .BTC
KimcilWare
Amnesia	Instructions	*.amnesia or [byd at india dot com].SON.
777	Instructions	*.777
Al-Namrood	Instructions	*.unavailable, *.disappeared
Amnesia2	Instructions	*.amnesia
Apocalypse	Instructions	*.encrypted, *.FuckYourData, *.Encryptedfile, *.SecureCrypted
ApocalypseVM	Instructions	*.encrypted, *.locked
AutoLocky	Instructions	*.locky
BadBlock	Instructions	Doesn't change file extension. Look for BadBlock in ransom note
Cry9	Instructions	".<id>-juccy[a]protonmail.ch", ".id-<id>", ".id-<id>_[[email protected]].xj5v2", ".id-<id>_r9oj", ".id-<id>_x3m", ".id-<id>_[[email protected]]_[[email protected]].x3m", ".<id>", ".<id>-sofia_lobster[a]protonmail.ch" and ".<id>_[wqfhdgpdelcgww4g.onion.to].r2vy6"
Cry128	Instructions	*.fgb45ft3pqamyji7.onion.to._ or *.id__gebdp3k7bolalnd4.onion._' or *.id__2irbar3mjvbap6gt.onion.to._ or *.id-_[qg6m5wo7h3id55ym.onion.to].63vc4
CrypBoss	Instructions	*.crypt, *.R16M01D0
CryptInfinite	Instructions	*.CRINF
CryptoDefense	Instructions	Identifes as CryptoDefense leaves note HOW_DECRYPT.txt
Crypton	Instructions	".id-_locked", ".id-_locked_by_krec", ".id-_locked_by_perfect", ".id-_x3m", ".id-_r9oj", "[email protected]", "[email protected]_", "[email protected]_", "[email protected]_", "[email protected]_" and "[email protected]_"
Damage	Instructions	..damage
DMALocker2	Instructions	DMALocker2 with ID “DMALOCK 43:41:90:35:25:13:61:92
DMALocker	Instructions	DMALocker with ID “DMALOCK 41:55:16:13:51:76:67:99
Fabiansomware	Instructions	*.encrypted
FenixLocker	Instructions	*[email protected]!!
Globe2	Instructions	*.raid10, *.blt, *.globe, *.encrypted,*[[email protected]]
Globe3	Instructions	*.decrypt2017, *.hnumkhotep
Globe	Instructions	*.purge, *.globe, *[email protected].!dsvgdfvdDVGR3SsdvfEF75sddf#xbkNY45fg6}P{cg.xtbl.
GlobeImposter	Instructions	*.crypt
Gomasom	Instructions	*.crypt
Harasom	Instructions	*.html and note from Spamhaus or US Department of Justice
HydraCrypt	Instructions	*.hyrdacrypt, *.umbrecrypt
UmbreCrypt	Instructions	*.hydracrypt, *.umbrecrypt
KeyBTC	Instructions	Leaves ransom note called Decrypt_Your_Files.txt
LeChiffre	Instructions	*.LeChiffre
Marlboro	Instructions	*.oops
MRCR or Merry X-Mas	Instructions	*.PEGS1, *.MRCR1, *.RARE1, *.MERRY, *.RMCM1
Nemucod	Instructions	*.crypted
NemucodAES	Instructions	Does not change file extension
NMoreira	Instructions	*.maktub, *._AiraCropEncrypted!
OpenToYou	Instructions	*[email protected]
OzozaLocker	Instructions	*.locked
PClock	Instructions	Doesn't change extension look for enc_files.txt
Philadelphia	Instructions	*.locked
Radamant	Instructions	*.rdm, *.rrk
Stampado	Instructions	*.locked
Xorist	Instructions	*.EnCiPhErEd, *.0JELvV, *.p5tkjw, *.6FKR8d, *.UslJ6m, *.n1wLp0, *.5vypSa, *.YNhlv1
BitStak	Instructions	*.bitstak
GhostCrypt
8lock8	Instructions	.8block8
Jigsaw	Instructions	.FUN, .KKK,  .GWS, .BTC
Crysis		id}.{email address}.xtbl, crypt
Princess Locker	Instructions
Lock Screen
MacRansom	Instructions
AES_NI	Instructions	*.aes_ni, *.aes256, *.aes_ni_0day
BTCWare	Instructions	*.btcware, *.cryptobyte, *.cryptowin, *.theva
EncrypTile	Instructions	*.EncrypTile
LambdaLocker	Instructions	*.lambda_locked
Cute
my-Little-Ransomware
Nanolocker
TeslaCrack
7even-HONE$T	Python Script	{sequential number}.R4A or {sequential number}.R5A
Petya
Crypren
Alma	Instructions	Adds 5 random characters at the end of each file and a unique 8 character victim ID
Vindows
TeslaCrypt
KeRanger
TM	Instructions
Vandev	Instructions	.xorist (or adds a random extension)
XRatTeam		.xratteamLucked
XRatTeam		.xratteamLucked
FindZip	Instructions	*.crypt
Alpha	Instructions	*.encrypt
BitKangaroo	Instructions	*.bitkangaroo
Crypt38	Instructions	*.crypt38
DCry	Instructions	*.dcry
Hidden Tear	Instructions
MicroCop	Instructions	Adds Locked to the beginning of your encrypted files
Mole02	Instructions
Offline CryptoMix	Instructions	*.CRYPTOSHIELD, *.scl, *.rscl, *.lesli, *.rdmk, *.code, *.rmd
PowerLocky	Instructions	*.locky
StrikedDecrypter	Instructions	*[email protected],*[email protected], *[email protected], *[email protected], *[email protected], *[email protected], *[email protected]
AnDROid	Instructions	*.android
Anti-DDos	Instructions	*.f*cked
Crypt0	Instructions	*_crypt0
Crypto-Blocker	Instructions	*.corrupted
CryptoDevil	Instructions	*.devil
CryptoLocker by NTK	Instructions	*.powned
CryptoSomware	Instructions	*.FailedAccess
DeriaLock	Instructions	*.deria
DoNotOpen	Instructions	*.killedXXX
EnkripsiPC	Instructions	*.bleeped
F*ckTheSystem	Instructions	*.anon
Harzhuangzi	Instructions	*.Harzhuangzi
Haters	Instructions	*.haters
Hitler	Instructions	*.Nazi
JeepersCrypt	Instructions	*.jeepers
Manifestus	Instructions	*.f*cked
Mikoyan	Instructions	*.MIKOYAN
NullByte	Instructions	*._nullbyte
SnakeEye	Instructions	*.SnakeEye
Xncrypt	Instructions	*.xncrypt
Zyka	Instructions	*.lock
Unlock92	Instructions	*.CRRRT
Operation Global III		*.exe
CryptoTorLocker
Locker
CryptoHost
Manamecrypt
Pompous
Popcorn	Instructions
PoshCoder
Shade		*.xtbl, *.ytbl, *.breaking_bad, *.heisenberg.
Bitcryptor	Instructions	*.clf
CoinVault	Instructions	.cvlst
Bandarchor	N/A	[filename].id-[ID][email protected] (Decryption currently not possible)
Black Shades	N/A	*.silent (Decryption currently not possible)
Booyah	N/A	(Decryption currently not possible)
CryLocker	N/A	*.cry (Decryption currently not possible)
Crypt0l0cker	N/A	*.encrypted or *.enc (Decryption currently not possible)
CryptoLocker	Discontinued	*.encrypted, *.cryptolocker (Decryption currently not possible)
Cryptowall	N/A	(Decryption currently not possible)
CryPy	N/A	*.cry (Decryption currently not possible)
Crysis	Instructions	.{id}.{email address}.xtbl, crypt
CTB-Locker
DynA-Crypt	N/A	Decryptor Not Available
Hermes	N/A	Decryptor Not Available
Kirk	N/A	Decryptor Not Available
Lockdroid	N/A	Decryptor Not Available
LockLock		(Decryption Currently Not Possible)
MacAndCheese	N/A	.locked
MafiaWare	N/A	".Locked-by-Mafia" (or ".Locked-Mafiaware")
Mahasaraswati	N/A	.id-[UNIQUE USER’S ID].{mahasaraswati(@)india.com}.xtbl
Maktub Locker	N/A	adds a random extension
Mamba	N/A	Encrypts hard drives not files
Matrix	N/A	.matrix
Mole	N/A	.mole
NoobCrypt		Decypt keys are ZdZ8EcvP95ki6NWR2j or lsakhBVLIKAHg
Osiris	N/A	N/A
SamSam	N/A	adds a random string of characters to end of file
Satan	N/A	Decryptor Not Available
Serpent	N/A	Decryptor Not Available
TeslaCrypt v1	Instructions	{original file name}.ECC
TeslaCrypt v2	Instructions	{original file name}.VVV, CCC, ZZZ, AAA, ABC, XYZ
Zepto	N/A	.zepto
Zepto	N/A	.zepto