List of free Ransomware Decryptor Tools to unlock files



Thread author
If you are looking for ransomware decrypt tools to unlock files locked by ransomware on your Windows computer, then this list is what you are looking for. Ransomware threats are on the rise, and every other day we get to read about it – whether it is Petya or Locky. This class of malware seems to be the favorite now as it is very profitable – lock down users files and data and the demand money to unlock them.

While there are some basic steps one can take to prevent ransomware, including making use of some free anti-ransomware software, it can still happen that you end up being a victim of some ransomware.

Well, what does one do if that happens?

Ransomware Decryptor Tools

First of all, identify the Ransomware which has infected your computer. For this, you may use a free online service called ID Ransomware

If you are able to identify the ransomware, check if a ransomware decrypt tool is available for your type of ransomware. Currently, the following decryptor tools are available.

You may go through the entire list or press Ctrl+F and search for a specific ransomware or tool.

1] Emsisoft has just released its Decrypter for AutoLocky. AutoLocky is a new ransomware that tries to imitate the sophisticated Locky ransomware but is nowhere near as complex, which makes decryption feasible. Victims of AutoLocky will find their files encrypted and renamed to *.locky. It is available here.

2] Decrypter for HydraCrypt and UmbreCrypt Ransomware: HydraCrypt and UmbreCrypt are the two new Ransomware variants from the CrypBoss Ransomware family. Once successful in breaching your PC security, HydraCrypt and UmbreCrypt can lock your computer and deny access to your own files.

3] CryptoLocker Decryption Tool : This free Decryptlocker or CryptoLocker Decryption online tool from FireEye and Fox-IT to decrypt the Cryptolocker encrypted files. UPDATE: The site appears to have been taken down.

4] Petya ransomware decrypt tool & password generator: PETYA ransomware is one of the most recent online threats for PC users. It is a malware which overwrites the MBR (Master Boot Record) of your PC and leaves it unbootable and also disallows restarting the PC in Safe Mode.

5] Operation Global III Ransomware Decryption Tool: This ransomware attacks your system and then displays a leaving the user with no choice but to pay the ransom amount. All your encrypted file extensions are changed to .EXE and are infected with the malicious codes.

6] Emsisoft has released several decryptor tools for ransomware. This list currently includes:

  • Decrypter for Nemucod
  • Decrypter for DMALocker2
  • Decrypter for HydraCrypt
  • Decrypter for DMALocker
  • Decrypter for CrypBoss
  • Decrypter for Gomasom
  • Decrypter for LeChiffre
  • Decrypter for KeyBTC
  • Decrypter for Radamant
  • Decrypter for CryptInfinite
  • Decrypter for PClock
  • Decrypter for CryptoDefense
  • Decrypter for Harasom
  • Decryptor for Xorist
  • Decryptor for 777
  • Decryptor for BadBlock
  • Decryptor for Apocalypse
  • Decrypter for ApocalypseVM
  • Decrypter for Stampado
  • Decrypter for Fabiansomware
  • Decrypter for Philadelphia
  • Decrypter for FenixLocker
  • Decrypter forAl-Namrood
  • Decrypter for Globe ransomware.
You can get them all for free at their official website along with detailed usage guides.

7] Cisco also offers a free Decryption Tool for TeslaCrypt Ransomware Victims. This TeslaCrypt Decryption Tool is an open source command line utility for decrypting TeslaCrypt ransomware encrypted files so users’ files can be returned to their original state. Read more on it here.

8] TeslaCrack is available on GitHub. It will help you decrypt files that were crypted with the latest version of the TeslaCrypt ransomware.

9] Ransomware Removal & Response Kit is not a tool, but a compilation of guides and various resources relating to dealing with ransomware, that can prove to be of help. It is a 500 MB download. Read more about it here.

10] Unlock files locked by Decrypt Protect ransomware using this tool from Emsisoft.

11] Trend Micro AntiRansomware Tool will help you take back ownership of your computer

12] HitmanPro.Kickstart is a free Ransomware Removal Tool that will help you rescue a ransomed PC. It lets you start your computer from a USB flash drive to remove malware that has ransomed or locked your computer and does not allow you to access it.

13] Shade Ransomware Decryption Tool will help decrypt files with the following extensions: .xtbl, .ytbl, .breaking_bad, .heisenberg. Go get it from Intel.

14] AVG has also released ransomware decrypt tools for the following ransomware:

  • Apocalypse
  • Bart ransomware
  • BadBlock
  • Crypt888
  • Legion
  • SZFLocker
  • TeslaCrypt.
Go get them all here.

15] Kaspersky WindowsUnlocker can be useful if the Ransomware totally blocks access to your computer or even restrict access to select important functions, as it can clean up a ransomware infected Registry.

16] RannohDecryptor from Kaspersky will help decrypt files encrypted by the Rannoh, AutoIt, Fury, Crybola, Cryakl, CryptXXX, MarsJoke ransomware. Read more about it and then download it from here.

17] Kaspersky have also released several other decryptor tools like RectorDecryptor, RakhniDecryptor, ScatterDecryptor, XoristDecryptor, etc – go get them here. They will decrypt files encrypted by Rakhni, Agent.iih, Aura, Autoit, Pletor, Rotor, Lamer, Lortok, Cryptokluchen, Democry, Bitman or TeslaCrypt ransomware.

18] Check Point has released a Cerber Ransomware Decryption Tool. It is an online tool where you have to upload a file. UPDATE: This The Cerber Ransomware Decryption Tool has been rendered ineffective.

19] The decryption keys for the NoobCrypt ransomware have been posted on Twitter. Use these unlock keys ZdZ8EcvP95ki6NWR2j or lsakhBVLIKAHg if your computer gets infected.

20] Trend Micro Ransomware Screen Unlocker Tool will give you access to a ransomware blocked computer.

21] The CoinVault decryption tool decrypts files encrypted by Coinvault and Bitcryptor. ChimeraDecryptor tool is designed to decrypt files encrypted by Chimera. Get them all from

22] Kaspersky Ransomware Decryptor will automatically decrypt all files for CoinVault and Bitcryptor victims. Get it here.

23] Visit the Kaspersky NoRansom web page to find out if they have released a decryption tool for your ransomware. Currently, the pages shows the availability of WildfireDecryptor tool, ShadeDecryptor tool, RakhniDecryptor, RannohDecryptor tool and CoinVaultDecryptor tool. Also included are manual how-to’s and other useful resources about ransomware. Intel McAfee has also made a Wildfire Decryptor.

24] Jigsaw Decryptor Tool will help you from the ransomware that simply deletes your files if you don’t pay up. You can download the tool here. BleepingComputer also has several ransomware removal guides for TorrentLocker, Alpha Crypt, etc, that can help you manually remove the infections.

25] Master Key for TeslaCrypt ransomware has been released. Tesladecrypt from Intel will decrypt TeslaCrypt encrypted files with the following extensions: .mp3, .micro, .xxx, and .ttt.

26] Generally speaking, Anvi Rescue Disk can come to your rescue as it can help you uninstall & remove Ransomware.

Updated on 14th Oct 2016


About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.