https://id-ransomware.malwarehunterteam.com/
https://lesuobingdu.qianxin.com/
| 解密类型 | 后缀名 |
|---|---|
| CryptXXX V1, V2 | .crypt |
| TeslaCrypt V1** | .ECC |
| TeslaCrypt V2** | .VVV, CCC, ZZZ, AAA, ABC, XYZ |
| TeslaCrypt V3 | .XXX or TTT or MP3 or MICRO |
| TeslaCrypt V4 | 后缀名不变 |
| crysis | .crysis .xtbl, .crysis, .dharma, .wallet |
| 纵情 | {windows-文件发生意外问题-可修复(严禁修改)-错误代码0X00000BF8}-* |
| Crypt888 | Lock.* |
| noobodyCrypt | 后缀名不变 |
| wannacry | .wannacry |
https://success.trendmicro.com/solution/1114221
| 解密类型 | 后缀名 |
|---|---|
| CryptXXX V1, V2, V3* | .crypt, cryp1, crypz, or 5 hexadecimal characters |
| CryptXXX V4, V5 | .5 hexadecimal characters |
| TeslaCrypt V1** | .ECC |
| TeslaCrypt V2** | .VVV, CCC, ZZZ, AAA, ABC, XYZ |
| TeslaCrypt V3 | .XXX or TTT or MP3 or MICRO |
| TeslaCrypt V3 | .XXX or TTT or MP3 or MICRO |
| TeslaCrypt V4 | 后缀名不变 |
| SNSLocker | .RSNSLocked |
| AutoLocky | .locky |
| BadBlock | “Help Decrypt.html” |
| 777 | .777 |
| XORIST | .xorist or random extension |
| XORBAT | .crypted |
| CERBER V1 | .cerber |
| Stampado | .locked,or “paytodecrypt@sigaint.org” or “ransom64@sigaint.org” |
| Nemucod | .crypted |
| Chimera | .crypt |
https://decrypter.emsisoft.com/
| 解密类型 | 后缀名 |
|---|---|
| NMoreira | .maktub or *.__AiraCropEncrypted! |
| OzozaLocker | .locked |
| globe | .purge, .globe |
| globe2 | .raid10, .blt, .globe, .encrypted |
| Al-Namrood | .unavailable, .disappeared |
| FenixLocker | .centrumfr@india.com!! |
| Fabiansomware | .encrypted |
| Philadelphia | .locked |
| ApocalypseVM | .encrypted,.locked |
| Apocalypse | .encrypted, .FuckYourData, .Encryptedfile,.SecureCrypted |
| DMALocker2 | “DMALOCK 43:41:90:35:25:13:61:92” |
| HydraCrypt | .hydracrypt*,.umbrecrypt* |
| DMALocker | “DMALOCK 41:55:16:13:51:76:67:99” |
| CrypBoss | .crypt,.R16M01D05 |
| Gomasom | .crypt and the file name contains an email address to contact |
| LeChiffre | .LeChiffre |
| KeyBTC | “keybtc@inbox.com” |
| Radamant | .rdm,.rrk. |
| CryptInfinite | .CRINF |
| PClock | “enc_files.txt” |
| CryptoDefense | “HOW_DECRYPT.txt” |
| Harasom |
https://www.nomoreransom.org/decryption-tools.html
| 解密类型 | 后缀名 |
|---|---|
| Marsjoke | |
| Polyglot | |
| Wildfire | .wflx. |
| Chimera | |
| Shade V1 | .xtbl, .ytbl, .breaking_bad, .heisenberg |
| CoinVault | |
| Bitcryptor | |
| Rannoh | |
| AutoIt | |
| Fury | |
| Crybola | |
| Cryakl | |
| Rakhni | |
| Agent.iih | |
| Aura | |
| Autoit | |
| Pletor | |
| Rotor | |
| Lamer | |
| Lortok | |
| Cryptokluchen | |
| Democry | |
| Bitman | |
| jaff | .jaff, .wlu, .svn |
http://support.kaspersky.com/viruses/utility
| 解密类型 | 后缀名 |
|---|---|
| Scatter | |
| Scraper | |
| Rector |
http://files-download.avg.com/util/avgrem/avg_decryptor_Bart.exe
| 解密类型 | 后缀名 |
|---|---|
| Bart | .bart,.bart.zip,.perl |
http://www.bleepingcomputer.com/download/windows/ransomware-decryptors/
http://www.bleepingcomputer.com/download/publisher/michael-gillespie/
https://download.bleepingcomputer.com/demonslay335/hidden-tear-decrypter.zip
https://www.bleepingcomputer.com/news/security/decryptor-available-for-princess-locker-ransomware/
https://download.bleepingcomputer.com/demonslay335/DXXDDecrypter.zip
https://download.bleepingcomputer.com/demonslay335/DXXD2Decrypter.zip
http://download.bleepingcomputer.com/demonslay335/GibonDecrypter.zip
| 解密类型 | 后缀名 |
|---|---|
| DXXD | .*DXXD |
| Princess | .xrnc8 |
| 8lock8 | .8lock8 |
| Bart | .bart,.bart.zip,.perl |
| Crypt38 | |
| BitStak | |
| Alpha | |
| Unlock92 | |
| Hidden Tear | |
| PowerWare Locky | |
| Microcop | |
| Jigsaw | |
| GhostCrypt | |
| Gibon | encrypt |
| Striked | nukem@mortalkombat.top、rap@mortalkombat.top、m.pirat@aol.com、duk@mortalkombat.top、jekabro@mortalkombat.top、Andrey.gorlachev@aol.com、bitcoin@mortalkombat.top |
https://www.avast.com/ransomware-decryption-tools#crypt
| 解密类型 | 后缀名 |
|---|---|
| Alcatraz | .Alcatraz |
| Apocalypse | .encrypted, .FuckYourData, .locked, .Encryptedfile, .SecureCrypted |
| BadBlock | 不会改变后缀名 |
| Bart | .bart.zip |
| Crypt888 | Lock.* |
| CrySiS | .xtbl,.crysis |
| Legion | .legion,.cbf |
| NoobCrypt | 不会改变后缀名,勒索文件名“ransomed.html” |
| SZFLocker | .szf |
95015服务热线
微信公众号
京公网安备11000002002064号