Bismillahir Rahomanir Rahim

TOP SYNTHESIS OF RANSOMWARE

DECRYPTION TOOLS
PART-01
-Gaibandhar Chele Raton

Assalamu Alaikum………

SYNTHESIS OF RANSOMWARE DECRYPTION

TOOLS:

1. ecrypter for HydraCrypt and UmbreCrypt

Ransomware: HydraCrypt and UmbreCrypt are two
new Ransomware variants from the Ransomware
CrypBoss family. After successfully breaching your
computer's security, HydraCrypt and UmbreCrypt can
lock your computer and deny access to your own files.

2 - ryptoLocker Decryption Tool: This free Decryptlocker or

CryptoLocker online decryption tool from FireEye and
Fox-IT to decrypt Cryptolocker encrypted files. UPDATE:
The website appears to have been taken down.

3 - Petya ransomware decrypt tool & password generator:

PETYA ransomware is one of the most recent online
threats to PC users. It is a malware that overwrites your
PC's MBR (Master Boot Record) and makes it
unbootable and also disallows PC restarting in Safe
Mode.
PAGE-01
 PAGE-02

4- Operation Global III Ransomware Decryption Tool: This

ransomware tool attacks your system and then shows up
leaving the user with no choice but to pay the ransom. All
your encrypted file extensions are changed to .EXE and
infected with malware.

5- Unlock locked files by Decrypt Protect ransomware

Unlock locked files by Decrypt Protect ransomware with
this tool from Emsisoft.

6- Emsisoft has released several decryption tools for

ransomware. This list now includes ransomware
decryption tools for:

"""""""""""""AutoLocky, Aurora, Nemucod, DMALocker2,

HydraCrypt, UmbreCrypt, DMALocker, CrypBoss, Gomasom,
LeChiffre, KeyBTC, Radamant, CryptInfinite, PClock,
CryptoDefense, Harasom, Xorist, 777, BadBlock,
DApocalypse, ApocalypseVMer, Stamp Al-Namrood, Globe,
OzozaLocker, Globe2, NMoreira or XRatTeam or XPan,
OpenToYou or OpenToDecrypt, GlobeImposter, MRCR,
Globe3, Marlboro, OpenToYou, CryptON, Damage, Cry9,
Cry128, Amnesia, Amnesia2, NemucodAES, BigBobRoss,
PewCrypt, CryptoPokemon ZQ Ransomware, MegaLocker,
JSWorm 2.0, GetCrypt, Ims00rry, ZeroFks, JSWorm 4.0,
WannaCryFake, Avest, Muhstik, HildaCrypt, STOP
Djvu.""""""""""""""""""""
 PAGE-03

You can get them all for free at their official website along
with detailed manuals.
7- Cisco also provides a free decryption tool for
Ransomware TeslaCrypt victims. This TeslaCrypt
decryption tool is an open source command line utility for
decrypting TeslaCrypt ransomware encrypted files so that
the user's files can be returned to their original state.

8- Cisco Talos has released the PyLocky ransomware

decryption tool. This decoder is intended to decrypt files
for victims affected by the PyLocky ransomware.

9- TeslaCrack is available on GitHub . It will help you

decrypt files that have been encrypted with the latest
version of the TeslaCrypt ransomware.

10 - The AntiRansomware Trend Micro tool will help you

regain ownership of your computer by removing
ransomware on infected computers. To use this tool,
start Safe Mode with Networking. Download Anti-
Ransomware software and save it to your desktop.
Double click on it to install it. Once it is installed,
reboot your computer and go to normal mode where
the screen is locked by ransomware. Now activate the
Anti-ransomware software by pressing the following
keys: Left CTRL + ALT + T + I. Run Scan, Clean and
then restart your computer. This tool is very useful in
cases of ICE Ransomware infections.
 PAGE-04

11 - Trend Micro Ransomware screen unlock tool will give you

access to the computer that is blocked from
ransomware.

12 - Trend Micro Ransomware file decryption tool will try to

decrypt files encrypted by some Ransomware family such
as CryptXXX, Crysis, DemoTool, DXXD, TeslaCrypt,
SNSLocker, AutoLocky, BadBlock, 777, XORIST,
Teamxrat / Xpan, XORBAT, CERBER, Stampado,
Nemucod, Chimera, LECHIFFRE, MirCop, Jigsaw, Globe
/ Purge, V2 :, V3 :, etc

13 - HitmanPro.Kickstart is a free Ransomware removal tool

that will help you rescue a PC be redeemed. It allows you
to boot your computer from a USB flash drive to remove
ransomware or lock your computer and not allow you to
access it.

14 - Shadow Ransomware decryption tool helps to decrypt

files with the following extensions: .xtbl, .ytbl,
breaking_bad, .heisenberg. Get it from McAfee Intel.

15 - McAfee Ransomware Recover is a tool and platform that

not only unlocks user files, apps, databases and other
encrypted files, but is also available to the security
community.
 PAGE-05

16 - AVG has also released ransomware decryption tools for

the following ransomware:

• Apocalypse

• Bart ransomware

• BadBlock

• Crypt888

• Legion

• SZFLocker

• TeslaCrypt

All here .
17 - Check Point has released a decryption tool Cerber
Ransomware. It is an online tool where you have to
upload a file. UPDATE: This Cerber Ransomware
decryption tool has been ineffective. The Merry X-Mas
decoder from Checkpoint can decrypt files encrypted by
the Merry X-Mas ransomware. BarRax decryption tool is
designed to decrypt files encoded by BarRax. Available
at Checkpoint .

18 - The decryption keys for the NoobCrypt ransomware were

posted on Twitter. Use
the ZdZ8EcvP95ki6NWR2j or lsakhBVLIKAHg unlock
keys if your computer is infected.
 PAGE-06

19 - Bitdefender has released the following ransomware

decryption tools: Bart Ransomware Decryptor |
Linux.Encoder.3 | Linux.Encoder.1 | BTCWare |
GandCrab Decryptor | Annabelle Decryptor.

20 - CoinVault decryption tool decrypts files encrypted by

Coinvault and Bitcryptor. The ChimeraDecryptor tool is
designed to decrypt files encrypted by Chimera. Get them
all from NoMoreransome.org.

21 - Vindows Ransomware decryption tool will help to decrypt

files locked by Vindows Locker. Download it here.

22 - Download Decryptor from BleepingComputer to decrypt

8ans8 ransomware encrypted files.

23 - The decoder for the Crypren ransomware encrypted files

is available here.

24 - The decoder for the Cans38 ransomware encrypted files

is available here.

25 - Decoder for CryptInfinite or DecryptorMax is

available here .
 PAGE-07

26 - For Cryptohost you can use this password generator

created by Michael Gillespie. The files are stored on
Dropbox.

27 - Decoder for my-Little-Ransomware is available

on Github .
28 - CERT-PL has released one for CryptoMix.

29. decoder - Popcorn decoding tool is available here .

30 - Avast has released decryption tools for the following

ransomware:
""""""""" AES_NI, Alcatraz, Locker, Apocalypse, BadBlock,
Bart, BTCWare, Crypt888, CryptoMix (Offline) or
CryptFile2, Zeta, CryptoShield ransomware family,
CrySiS, EncrypTile, FindZip, Globe, HiddenTear, Jigsaw,
LambdaLocker, Legion, NoobCrypt, Stampado,
SZFLocker, TeslaCrypt, XData, BigBobRoss."""""""""
Get it all here .
31 - ESET Crysis Decryptor is a free decryption tool for Crysis
ransomware victims. Download it from Eset . It will also
remove Dhans ransomware.
32 - Kaspersky WindowsUnlocker can be useful if
Ransomware completely blocks access to your computer
or even restrict access to select important functions, as it
can clean up the ransomware infected Registry.
 PAGE-08

33 - RannohDecryptor from Kaspersky will help decrypt files

encrypted by Rannoh, AutoIt, Fury, Crybola, Cryakl,
CryptXXX, CryptXXX v.2, CryptXXX v.3, MarsJoke,
Polyglot, Dharma ransomware. Download it from here .

34 - Kaspersky also released a number of other decryption

tools like Rector Decryptor, Rakhni Decryptor, Wildfire
Decryptor, Scraper Decryptor, Shade Decryptor, Scatter
Decryptor, Xoris Decryptor, etc - visit them here . They
will decrypt files encrypted by Rakhni, Agent.iih, Aura,
Autoit, Pletor, Rotor, Lamer, Lortok, Cryptokluchen,
Democry, Bitman, TeslaCrypt and other ransomware.

35 - Kaspersky Ransomware decoder will automatically

decrypt all files for victims of CoinVault and Bitcryptor. It
also helps in the case of Cryakl ransomware.

36 - Visit the Kaspersky NoRansom website to find out if they

have released a decryption tool for your ransomware.
Currently, this page shows the availability of the
WildfireDecryptor tool, the ShadowDecryptor tool,
RakhniDecryptor, the RannohDecryptor tool, and the
CoinVaultDecryptor tool. Also includes how-to guides and
other helpful resources about ransomware. Intel McAfee
has also implemented Wildfire Decoder.
 PAGE-09

RakhniDecryptor will help decrypt files encrypted by

Dharma, Crysis, Chimera, Rakhni, Agent.iih, Aura, Autoit,
Pletor, Rotor, Lamer, Lortok, Cryptokluchen, Democry,
Bitman (TeslaCrypt) version 3.

37 - Malwarebytes has released the Telecrypt Ransomware

Decryption Tool to decrypt Telecrypt Ransomware
infected files. Download it here .

38 - Michael Gillespie, a ransomware researcher released

these ransomware decryption tools:

""""""""" Aurora Ransomware Decrypter, FilesLocker

Ransomware Decrypter, InsaneCrypt Decryptor for
desuCrypt Ransomware, GIBON Ransomware
Decryptor, Striked Ransomware Decrypter, DCry
Ransomware Decrypter, BitKangaroo Decrypter,
BTCWare Ransomware Decrypter, Crypt38 Ransomware
Decrypter, BitStak Ransomware Decrypter, Alpha
Ransomware Decryptor, Unlock92 Ransomware
Decrypter, Hidden Tear Ransomware Decrypter, Hidden
Tear Brute Forcer Ransomware decryptor, PowerWare
Locky Ransomware Decrypter, GhostCrypt Ransomware
Decrypter, MicroCopy Ransomware Decryptor, Jigsaw
Ransomware Decrypter."""""""""
 PAGE-10

In addition, he also released the following useful tools:

• StzzyDecryptor decrypts files encrypted by different screen

lock sets which are pretty easy to decrypt
• RansomNoteCleaner can be used to scan the ransomware
victim's computer for the remaining ransom notes and delete
them.
• CryptoSearch cleans your computer encrypted files and notes
the ransom from ransomware infection.

39 - The Master Key for TeslaCrypt ransomware has been

released. Tesladecrypt from Intel will decrypt TeslaCrypt
encrypted files with the following extensions: .mp3,
.micro, .xxx and .ttt.

40 - BTCWareDecrypter will decrypt files encrypted by

BTCWare Ransomware. Get it here .

41 - 360 Ransomware decryption tool can decrypt files locked

by more than 80 ransomware including GandCrab, Petya,
Gryphon, GoldenEye and WannaCry ransomware.

42 - Under favorable conditions, WannaKey and WanaKiwi,

two WannaCrypt decryption tools can help decrypt
WannaCrypt or WannaCry Ransomware encrypted files
by obtaining the encryption key used by the
ransomware.
 PAGE-11

43 - Crysis decoding engine was developed by Esetas well as

Avast.

44 - The ransomware decryption tool from QuickHeal will

decrypt files locked by the following ransomware:

""""""""""""""""""""
, Troldesh Ransomware [.xtbl], Crysis Ransomware [.CrySiS]
Cryptxxx Ransomware [.crypt], Ninja Ransomware [@ aol.co
Apocalypse Ransomware [.encrypted ,[777. $ m
LeChiffre Ransomware [.LeChiffre], Globe , [odcodc.
Ransomware [.hnyear], Globe2 Ransomware [.blt], Globe3
Ransomware [.decrypt2017], DeriaLock Ransomware [. ,
Globe3 Ransomware [.globe & .happydayzz], Troldesh
, Ransomware [.dharma], Troldesh Ransomware [.wallet]
.Troldesh Ransomware [.onion]
""""""""""""""""""""""
Download it here.
45 - The Ransomware Removal & Response Kit is not a tool,
but a collection of various instructions and resources related to
ransomware handling that can prove to be helpful. Download
500 MB. Read more about it here .

46 - Anvi Rescue Disk may come to your rescue as it can help

you uninstall and remove Ransomware.
NEXT PART COMING SOON……….
 About Author

Gaibandhar Chele Raton

Gaibandhar Chele Raton is a famous musical artist and book writer of
Bangladesh. Her Real name is Md Rokibul Islam. Her fans Call him
Gaibandhar Chele Raton. His Also a Internet Specialist, YouTuber, web
designer and Computer Expart.

Contacts
Website-https://www.rokibulislamroton.top

Email- ratonking222@gmail.com AND gaibandharcheleraton@gmail.com

Cell- +8801876752820

SOCIAL MEDIA
Facebook- https://www.facebook.com/rokibulislamengineer
INSTAGRAM- https://www.instagram.com/mdrokibulislamengineer
TWITTER- https://www.twitter.com/rokibulofficial
LINKEDIN- https://www.linkedin.com/in/rokibulofficial
FACEBOOK_PAGE- https://facebook.com/stupted
TIKTOK-https://www.tiktok.com/@rotonvaiofficial
PINTEREST- https://www.pinterest.com/stupted
YOUTUBE- https://youtube.com/channel/UC0wufyiL7VKziNYPH38iUQg

Thanks for Read