How To Decrypt Files Locked By a Ransomware

If your files got decrypted by a ransomware there are still chances to save them. There are always new ransomware versions appearing but the security experts work hard as well and they come up with new decryption tools every day. Here we have a list of free programs that decrypt your files affected by ransomware.

Make sure you have completely removed the threat before decrypting the files. Also, we strongly recommend securing your computer with a proper antivirus software before continuing. Otherwise you leave it vulnerable and the threat might reappear as well as other potential injections might happen.

TIP: If you know the virus name or a file extension of encrypted file, simply use CTRL + F to quickly find a decryptor for it on this page. If you don’t find what you need make sure to visit the individual pages of the decryptors as they are constantly updated and a tool might have appeared after we have updated this article.

If decrypting the files does not work you can always try restoring the lost files.

If you can’t find a decryptor for your locked files and you cannot restore them, we suggest backing up all your encoded files in case a decryption software is released in the future.

 Available Decryptors:

 EMSISOFT Decrypter

EMSISOFT has created several free decryptors. Detailed instructions are included for each of them.

Click this link to use EMSISOFT Decrypter

The following files can be decrypted using this tool:

Ransomware Ransom notes Extensions of encrypted files
Marlboro _HELP_Recover_Files_.html .oops
MRCR YOUR_FILES_ARE_DEAD.HTA
MERRY_I_LOVE_YOU_BRUCE.HTA
.PEGS1 .MRCR1 .RARE1 .MERRY .RMCM1
Globe3 How To Recover Encrypted Files.hta .decrypt2017 .hnumkhotep (and others)
OpenToYou !!!.txt [email protected]
GlobeImposter HOW_OPEN_FILES.hta .crypt
NMoreira Recupere seus arquivos. Leia-me!.txt
How to decrypt your files.txt
.maktub .__AiraCropEncrypted!
OzozaLocker HOW TO DECRYPT YOU FILES.txt .locked
Globe2 .raid10 .blt .globe .encrypted .[[email protected]] (and others)
Globe .purge .globe [email protected]!dsvgdfvdDVGR3SsdvfEF75sddf#xbkNY45fg6}P{cg.xtbl (and others)
Al-Namrood .Read_Me.Txt .unavailable .disappeared
FenixLocker CryptoLocker.txt
Help to decrypt.txt
[email protected]!!
Fabiansomware .How_To_Decrypt_Your_Files.txt .encrypted
Philadelphia .locked
Stampado .locked
Apocalypse .How_To_Decrypt.txt
.Where_my_files.txt
.How_to_Recover_Data.txt
.Contact_Here_To_Recover_Your_Files.txt
.encrypted .FuckYourData .Encryptedfile .SecureCrypted
BadBlock Help Decrypt.html (files are not renamed)
Xorist HOW TO DECRYPT FILES.txt .EnCiPhErEd .0JELvV .p5tkjw .6FKR8d .UslJ6m .n1wLp0 .5vypSa .YNhlv1
777 .777
AutoLocky info.txt
info.html
.locky
Nemucod DECRYPT.txt .crypted
DMALocker2 (files are not renamed)
HydraCrypt .hydracrypt .umbrecrypt
DMALocker (files are not renamed)
CrypBoss .crypt .R16M01D05
Gomasom (file name contains an email address to contact) .crypt
LeChiffre (asks you to contact [email protected]) .LeChiffre
KeyBTC DECRYPT_YOUR_FILES.txt (contact [email protected])
Radamant .rdm .rrk
CryptInfinite .CRINF
PClock enc_files.txt (files are not renamed)
CryptoDefense HOW_DECRYPT.txt
Harasom (pretends to be from Spamhaus or the US Department of Justice) .html

 OG3 Patcher

This patcher makes the files usable again as well as makes sure the virus does not come back.

Click this link to use OG3 Patcher

The following files can be decrypted using this tool:

Ransomware Ransom notes Extensions of encrypted files
Operation Global III (displays lockscreen) .exe

 Trend Micro Ransomware File Decryptor

This tool decrypts several types of encoded files. Make sure you carefully read the instructions on download page before you continue!

Click this link to use Trend Micro Ransomware File Decryptor

The following files can be decrypted using this tool:

Ransomware Extensions of encrypted files
CryptXXX V1, V2, V3 .crypt .cryp1 .crypz (or 5 hexadecimal characters)
CryptXXX V4, V5 b787d22d9cb06342658bf546039117bc.12345 (and similar)
Crysis .xtbl .crypt
TeslaCrypt V1 .ECC
TeslaCrypt V2 .VVV .CCC .ZZZ .AAA .ABC .XYZ
TeslaCrypt V3 .XXX .TTT .MP3 .MICRO
TeslaCrypt V4 (files are not renamed)
SNSLocker .RSNSLocked
AutoLocky .locky
BadBlock (files are not renamed)
777 .777
XORIST .xorist (and others)
XORBAT .crypted
CERBER V1 .cerber
Stampado .locked
Nemucod .crypted
Chimera .crypt
LECHIFFRE .LeChiffre
MirCop Lock.
Jigsaw (uses random extensions)
Globe/Purge .purge (or other random extensions)
DXXD dxxd
Teamxrat/Xpan .__xratteamLucked
Crysis .xtbl .crypt
DemoTool .demoadc

 Free Ransomware Decryption Tools by Avast

Several ransomware versions can be tackled by using the free tools provided by Avast.

Click this link to use Decryption Tools by Avast

The following files can be decrypted using this tool:

Ransomware Ransom notes Extensions of encrypted files
Alcatraz Locker ransomed.html .Alcatraz
Apocalypse .How_To_Decrypt.txt
.README.Txt
.Contact_Here_To_Recover_Your_Files.txt
.How_to_Recover_Data.txt
.Where_my_files.txt
.encrypted .FuckYourData .locked .Encryptedfile .SecureCrypte
BadBlock Help Decrypt.html (files are not renamed)
Bart recover.bmp
recover.txt
.bart.zip
Crypt888 (Mircop) (changes your wallpaper) Lock.
CrySiS Decryption instructions.txt
Decryptions instructions.txt
README.txt
.xtbl .CrySiS
CryptoMix (Offline) (CryptFile2/Zeta) HELP_DECRYPT_YOUR_FILES.txt
# RESTORING FILES #.txt
.CRYPTOSHIELD .rdmk .lesli .scl .code .rmd .rscl
Globe How to restore files.hta
Read Me Please.hta
.ACRYPT .GSupport[0-9] .blackblock .dll555 .duhust .exploit .frozen .globe .gsupport .kyra .purged .raid[0-9] [email protected] .xtbl .zendrz .zendr[0-9]
HiddenTear READ_IT.txt
MSG_FROM_SITULA.txt
DECRYPT_YOUR_FILES.HTML
.locked .34xxx .bloccato .BUGSECCCC .Hollycrypt .lock .saeid .unlockit .razy .mecpt .monstro .lok .암호화됨 .8lock8 .fucked .flyper .kratos .krypted .CAZZO .doomed
Jigsaw (displays a window) .kkk .btc .gws .J .encrypted .porno .payransom .pornoransom .epic .xyz .versiegelt .encrypted .payb .pays .payms .paymds .paymts .paymst .payrms .payrmts .paymrts .paybtcs .fun .hush [email protected] .gefickt.
Legion (changes your wallpaper) .legion .cbf
NoobCrypt ransomed.html (files are not renamed)
Stampado (displays a window) .locked
SZFLocker (message in Polish language) .szf
TeslaCrypt (files are not renamed)

 Kaspersky Ransomware Decryptor

Kaspersky has several tools, each with detailed guides and usually tackling more than one ransomware at once.

Click this link to use Kaspersky Ransomware Decryptor

The following files can be decrypted using this tool:

Ransomware Extensions of encrypted files
Rannoh locked-
Cryakl CRYPTENDBLACKDC
AutoIt (random extensions)
CryptXXX V1, V2, V3 .crypt .crypz .cryp1
Polyglot
Shade V1, V2 .xtbl .ytbl .breaking_bad .heisenberg
Democry 2777 .legion
Bitman V3, V4 .xxx .ttt .micro .mp3 (or left unchanged)
Lobzik .fun .gws .btc .porno .AFD .pornoransom .epic .encrypted .J .payransom .paybtcs .paymrss .paymrts .paymst .paymts .payrms
Mircop Lock.
Crusis .xtbl .CrySiS
Rakhni
Agent.iih
Aura
Pletor
Rotor
Lamer
Lortok
Cryptokluchen
Chimera
Wildfire .wflx
CoinVault
Bitcryptor
Vandev
Xorist

 WanaKiwi Ransomware Decryptor

This tool has limitations. Please DO NOT restart the infected computer as otherwise your private key will be lost. Follow the instructions on the site.

Click this link to use WanaKiwi Ransomware Decryptor

The following files can be decrypted using this tool:

Ransomware Extensions of encrypted files
WannaCry (WannaCryptor) .WCRY .WNCRY .WNCRYT

Haven’t found a decryptor you searched for? Do not worry yet! Try recovering your files using a few methods we have described here.

Found a decryptor that is not in this list? You can help other ransomware victims: contact us and we will add the tool to the list!