https://id-ransomware.malwarehunterteam.com/
https://lesuobingdu.qianxin.com/
解密类型 | 后缀名 |
---|---|
CryptXXX V1, V2 | .crypt |
TeslaCrypt V1** | .ECC |
TeslaCrypt V2** | .VVV, CCC, ZZZ, AAA, ABC, XYZ |
TeslaCrypt V3 | .XXX or TTT or MP3 or MICRO |
TeslaCrypt V4 | 后缀名不变 |
crysis | .crysis .xtbl, .crysis, .dharma, .wallet |
纵情 | {windows-文件发生意外问题-可修复(严禁修改)-错误代码0X00000BF8}-* |
Crypt888 | Lock.* |
noobodyCrypt | 后缀名不变 |
wannacry | .wannacry |
https://success.trendmicro.com/solution/1114221
解密类型 | 后缀名 |
---|---|
CryptXXX V1, V2, V3* | .crypt, cryp1, crypz, or 5 hexadecimal characters |
CryptXXX V4, V5 | .5 hexadecimal characters |
TeslaCrypt V1** | .ECC |
TeslaCrypt V2** | .VVV, CCC, ZZZ, AAA, ABC, XYZ |
TeslaCrypt V3 | .XXX or TTT or MP3 or MICRO |
TeslaCrypt V3 | .XXX or TTT or MP3 or MICRO |
TeslaCrypt V4 | 后缀名不变 |
SNSLocker | .RSNSLocked |
AutoLocky | .locky |
BadBlock | “Help Decrypt.html” |
777 | .777 |
XORIST | .xorist or random extension |
XORBAT | .crypted |
CERBER V1 | .cerber |
Stampado | .locked,or “paytodecrypt@sigaint.org” or “ransom64@sigaint.org” |
Nemucod | .crypted |
Chimera | .crypt |
https://decrypter.emsisoft.com/
解密类型 | 后缀名 |
---|---|
NMoreira | .maktub or *.__AiraCropEncrypted! |
OzozaLocker | .locked |
globe | .purge, .globe |
globe2 | .raid10, .blt, .globe, .encrypted |
Al-Namrood | .unavailable, .disappeared |
FenixLocker | .centrumfr@india.com!! |
Fabiansomware | .encrypted |
Philadelphia | .locked |
ApocalypseVM | .encrypted,.locked |
Apocalypse | .encrypted, .FuckYourData, .Encryptedfile,.SecureCrypted |
DMALocker2 | “DMALOCK 43:41:90:35:25:13:61:92” |
HydraCrypt | .hydracrypt*,.umbrecrypt* |
DMALocker | “DMALOCK 41:55:16:13:51:76:67:99” |
CrypBoss | .crypt,.R16M01D05 |
Gomasom | .crypt and the file name contains an email address to contact |
LeChiffre | .LeChiffre |
KeyBTC | “keybtc@inbox.com” |
Radamant | .rdm,.rrk. |
CryptInfinite | .CRINF |
PClock | “enc_files.txt” |
CryptoDefense | “HOW_DECRYPT.txt” |
Harasom |
https://www.nomoreransom.org/decryption-tools.html
解密类型 | 后缀名 |
---|---|
Marsjoke | |
Polyglot | |
Wildfire | .wflx. |
Chimera | |
Shade V1 | .xtbl, .ytbl, .breaking_bad, .heisenberg |
CoinVault | |
Bitcryptor | |
Rannoh | |
AutoIt | |
Fury | |
Crybola | |
Cryakl | |
Rakhni | |
Agent.iih | |
Aura | |
Autoit | |
Pletor | |
Rotor | |
Lamer | |
Lortok | |
Cryptokluchen | |
Democry | |
Bitman | |
jaff | .jaff, .wlu, .svn |
http://support.kaspersky.com/viruses/utility
解密类型 | 后缀名 |
---|---|
Scatter | |
Scraper | |
Rector |
http://files-download.avg.com/util/avgrem/avg_decryptor_Bart.exe
解密类型 | 后缀名 |
---|---|
Bart | .bart,.bart.zip,.perl |
http://www.bleepingcomputer.com/download/windows/ransomware-decryptors/
http://www.bleepingcomputer.com/download/publisher/michael-gillespie/
https://download.bleepingcomputer.com/demonslay335/hidden-tear-decrypter.zip
https://www.bleepingcomputer.com/news/security/decryptor-available-for-princess-locker-ransomware/
https://download.bleepingcomputer.com/demonslay335/DXXDDecrypter.zip
https://download.bleepingcomputer.com/demonslay335/DXXD2Decrypter.zip
http://download.bleepingcomputer.com/demonslay335/GibonDecrypter.zip
解密类型 | 后缀名 |
---|---|
DXXD | .*DXXD |
Princess | .xrnc8 |
8lock8 | .8lock8 |
Bart | .bart,.bart.zip,.perl |
Crypt38 | |
BitStak | |
Alpha | |
Unlock92 | |
Hidden Tear | |
PowerWare Locky | |
Microcop | |
Jigsaw | |
GhostCrypt | |
Gibon | encrypt |
Striked | nukem@mortalkombat.top、rap@mortalkombat.top、m.pirat@aol.com、duk@mortalkombat.top、jekabro@mortalkombat.top、Andrey.gorlachev@aol.com、bitcoin@mortalkombat.top |
https://www.avast.com/ransomware-decryption-tools#crypt
解密类型 | 后缀名 |
---|---|
Alcatraz | .Alcatraz |
Apocalypse | .encrypted, .FuckYourData, .locked, .Encryptedfile, .SecureCrypted |
BadBlock | 不会改变后缀名 |
Bart | .bart.zip |
Crypt888 | Lock.* |
CrySiS | .xtbl,.crysis |
Legion | .legion,.cbf |
NoobCrypt | 不会改变后缀名,勒索文件名“ransomed.html” |
SZFLocker | .szf |
95015服务热线
微信公众号