Next step: Protect yourself from a repeat attack.
50% of companies hit with ransomware experience repeat attacks. With Barkly, you can start blocking ransomware now — before it encrypts another file.
Get protection ‹ Back to DecryptorsJust type in the file extension of your locked/encrypted files and we’ll check to see if there’s a free decryption tool you can use. Note: Some extensions are used by multiple ransomware variants.
Even if decryption isn’t an immediate option, there are other things you can do now.
Get answers to your most immediate questions
Read the postWith Barkly, you can start blocking ransomware now
Get protection| Name | Extension | Decryptor |
|---|---|---|
| .CryptoHasYou. | .enc | Check for Decryptor › |
| 777 | .777 | Check for Decryptor › |
| 7ev3n | .R4A .R5A |
Check for Decryptor › |
| 8lock8 | .8lock8 | Check for Decryptor › |
| AES_NI | .aes_ni .aes256 .aes_ni_0day |
Check for Decryptor › |
| Alcatraz Locker | .Alcatraz | Check for Decryptor › |
| Alma Locker | randomly generated extension | Check for Decryptor › |
| Alpha Ransomware | .encrypt | Check for Decryptor › |
| Angry Duck | .adk | Check for Decryptor › |
| Apocalypse | .encrypted .locked .SecureCrypted |
Check for Decryptor › |
| AutoLocky | .locky | Check for Decryptor › |
| Aw3s0m3Sc0t7 | .enc | Check for Decryptor › |
| BadBlock | No change | Check for Decryptor › |
| Bart | .bart.zip .bart .perl |
Check for Decryptor › |
| BitCryptor | .clf | Check for Decryptor › |
| BitStak | .bitstak | Check for Decryptor › |
| BlackShades Crypter | .Silent | Check for Decryptor › |
| Blocatto | .blocatto | Check for Decryptor › |
| Brazilian | .lock | Check for Decryptor › |
| Central Security Treatment Organization | .cry | Check for Decryptor › |
| Cerber | .cerber | Check for Decryptor › |
| Cerber 2 | .cerber2 | Check for Decryptor › |
| Cerber 3 | .cerber3 random |
Check for Decryptor › |
| Chimera | .crypt | Check for Decryptor › |
| CoinVault | .clf | Check for Decryptor › |
| Comrade Circle | .comrade | Check for Decryptor › |
| Coverton | .coverton .enigma .czvxce |
Check for Decryptor › |
| Cryaki | .{CRYPTENDBLACKDC} | Check for Decryptor › |
| CryFile | .criptiko .criptoko .criptokod .cripttt .aga |
Check for Decryptor › |
| Crypren | .ENCRYPTED | Check for Decryptor › |
| CrypBoss | .crypt .R16M01D05 |
Check for Decryptor › |
| Crypt38 | .crypt38 | Check for Decryptor › |
| Crypt888 | Lock. | Check for Decryptor › |
| CryptConsole | unCrypte@outlook.com... decipher_ne@outlook.com... |
Check for Decryptor › |
| CryptFile2 | .scl | Check for Decryptor › |
| CryptInfinite | .crinf | Check for Decryptor › |
| CryptoDefense | No change | Check for Decryptor › |
| CryptoFortress | .frtrss | Check for Decryptor › |
| CryptoGraphic Locker | .clf | Check for Decryptor › |
| CryptoHitman | .porno .pornoransom |
Check for Decryptor › |
| CryptoHost | No change | Check for Decryptor › |
| CryptoJoker | .crjoker | Check for Decryptor › |
| CryptoLocker (Not active) | .encrypted | Check for Decryptor › |
| CryptoMix | .code | Check for Decryptor › |
| CryptOn | adds _crypt to filename .id-_locked .id-_locked_by_krec .id-_locked_by_perfect .id-_x3m .id-_r9oj .id-_garryweber@protonmail.ch .id-_steaveiwalker@india.com_ .id-_julia.crown@india.com_ .id-_tom.cruz@india.com_ .id-_CarlosBoltehero@india.com_ .id-_maria.lopez1@india.com_ |
Check for Decryptor › |
| CryptoTorLocker2015 | .CryptoTorLocker2015! | Check for Decryptor › |
| CryptoWall 1-3 | No change | Check for Decryptor › |
| CryptoWall 4 | Extension encrypted | Check for Decryptor › |
| CryptXXX | .crypt | Check for Decryptor › |
| CrySiS | ..johnycryptor@hackermail.com.xtbl .ecovector2@aol.com.xtbl .systemdown@india.com.xtbl .Vegclass@aol.com.xtbl ..{milarepa.lotos@aol.com}.CrySiS .{Greg_blood@india.com}.xtbl .{savepanda@india.com}.xtbl .{arzamass7@163.com}.xtbl |
Check for Decryptor › |
| CTB-Locker | .ctbl | Check for Decryptor › |
| CuteRansomware | .encrypted | Check for Decryptor › |
| Damage | .damage | Check for Decryptor › |
| DeCrypt Protect | .html | Check for Decryptor › |
| Dharma | .dharma .wallet .zzzzz |
Check for Decryptor › |
| DMA Locker | No change | Check for Decryptor › |
| DMA Locker 2 | No change | Check for Decryptor › |
| DMA Locker 3 | No change | Check for Decryptor › |
| DMA Locker 4 | No change | Check for Decryptor › |
| DNRansomware | .fucked | Check for Decryptor › |
| DXXD | .dxxd | Check for Decryptor › |
| DynA-Crypt | .crypt | Check for Decryptor › |
| EDA2 / HiddenTear | .locked .coded |
Check for Decryptor › |
| El-Polocker | .ha3 | Check for Decryptor › |
| Encryptile | .encryptile | Check for Decryptor › |
| Enigma | .enigma .1txt |
Check for Decryptor › |
| Erebus | encrypted extension | Check for Decryptor › |
| Evil Ransomware | .file0locked .evillock |
Check for Decryptor › |
| Exotic | .exotic | Check for Decryptor › |
| Fakben | .locked | Check for Decryptor › |
| Fantom | .fantom | Check for Decryptor › |
| FenixLocker | .centrumfr@india.com | Check for Decryptor › |
| FindZip | .crypt | Check for Decryptor › |
| GhostCrypt | .Z81928819 | Check for Decryptor › |
| Globe | .ACRYPT .GSupport[0-9] .blackblock .dll555 .duhust .exploit .frozen .globe .gsupport .kyra .lovewindows .purge .raid[0-9] .siri-down@india.com .xtbl .zendrz .zendr[0-9] |
Check for Decryptor › |
| Globe2 | .raid10 .blt .globe .encrypted .[mia.kokers@aol.com] |
Check for Decryptor › |
| Globe3 | .decrypt2017 .hnumkhotep |
Check for Decryptor › |
| GlobeImposter | .cryp | Check for Decryptor › |
| GNL Locker | .locked | Check for Decryptor › |
| GoldenEye | random 8 character | Check for Decryptor › |
| Gomasom | .crypt | Check for Decryptor › |
| Hades Locker | .~HL | Check for Decryptor › |
| Harasom | .html | Check for Decryptor › |
| Hi Buddy! | .cry | Check for Decryptor › |
| HiddenTear | .locked .34xxx .bloccato .BUGSECCCC .Hollycrypt .lock .saeid .unlockit .razy .mecpt .monstro .lok .8lock8 .fucked .flyper .kratos .krypted .CAZZO .doomed .AngleWare |
Check for Decryptor › |
| HydraCrypt | .hydracrypt_ID_[random numbers] | Check for Decryptor › |
| iLock | .crime | Check for Decryptor › |
| iLockLight | .crime | Check for Decryptor › |
| Jaff | .jaff .wlu .sVn |
Check for Decryptor › |
| Jigsaw | .btc .kkk .fun .gws .versiegelt .encrypted .payrmts .locked .gefickt .uk-dealer@sigaint.org |
Check for Decryptor › |
| Job Crypter | .locky | Check for Decryptor › |
| KeRanger | .encrypted | Check for Decryptor › |
| KeyBTC | .keybtc@inbox_com | Check for Decryptor › |
| KillerLocker | .rip | Check for Decryptor › |
| KimcilWare | .kimcilware .locked |
Check for Decryptor › |
| Kostya | .kostya | Check for Decryptor › |
| LambdaLocker | .lambda_locked | Check for Decryptor › |
| LeChiffre | .LeChiffre | Check for Decryptor › |
| Legion | .[#s]$f_tactics@aol.com$.legion | Check for Decryptor › |
| LLTP | .ENCRYPTED_BY_LLTPp | Check for Decryptor › |
| Lock93 | .lock93 | Check for Decryptor › |
| LockLock | .locklock | Check for Decryptor › |
| Locky | .locky .zepto .ODIN .shit .thor .osiris |
Check for Decryptor › |
| Lortok | .crime | Check for Decryptor › |
| LowLevel04 | oor. | Check for Decryptor › |
| Magic | .magic | Check for Decryptor › |
| Marlboro | .oops | Check for Decryptor › |
| MarsJoke | No change .ap19 |
Check for Decryptor › |
| Merry X-Mas / MRCR | .pegs1 ..mrcr1 .rare1 .merry .rmcm1 |
Check for Decryptor › |
| MirCop | .Lock | Check for Decryptor › |
| MireWare | .fucked | Check for Decryptor › |
| MM Locker | .locked | Check for Decryptor › |
| Mobef | .KEYZ .KEYH0LES |
Check for Decryptor › |
| Mole | .mole | Check for Decryptor › |
| Mole02 | [renamed_filename].Mole02 | Check for Decryptor › |
| MOTD | .enc | Check for Decryptor › |
| n1n1n1 | 8-9 characters added to file name | Check for Decryptor › |
| NanoLocker | No change | Check for Decryptor › |
| NMoreira | .maktub .__AiraCropEncrypted! |
Check for Decryptor › |
| Nemucod | .crypted | Check for Decryptor › |
| NoobCrypt | No change | Check for Decryptor › |
| Nuke | .nuclear55 | Check for Decryptor › |
| ODCODC | .odcodc | Check for Decryptor › |
| Offline ransomware | .cbf | Check for Decryptor › |
| OMG! Ransomware | .LOL! .OMG! |
Check for Decryptor › |
| OpenToYou | .-opentoyou@india.com | Check for Decryptor › |
| Operation Global III | .exe | Check for Decryptor › |
| OzozaLocker | .locked | Check for Decryptor › |
| PClock | No change | Check for Decryptor › |
| Petya | None (encrypts hard drive instead) | Check for Decryptor › |
| Popcorn Time | .filock | Check for Decryptor › |
| PowerWare | .locky | Check for Decryptor › |
| Princess Locker | random | Check for Decryptor › |
| Radamant | .RDM .RRK .RAD .RADAMANT |
Check for Decryptor › |
| Rakhni | .locked
.kraken .darkness .nochance .oshit .oplata@qq_com .relock@qq_com .crypto .helpdecrypt@ukr.net .pizda@qq_com .dyatel@qq_com _ryp .nalog@qq_com .chifrator@qq_com .gruzin@qq_com .troyancoder@qq_com .encrypted .cry .AES256 .enc .hb15 |
Check for Decryptor › |
| RansomPlus | .encrypted | Check for Decryptor › |
| Razy | .razy | Check for Decryptor › |
| Rector | .vscrypt .infected .bloc .korrektor |
Check for Decryptor › |
| RemindMe | .remind | Check for Decryptor › |
| Rokku | .rokku | Check for Decryptor › |
| Sage | .sage | Check for Decryptor › |
| Samas / SamSam | ..cifgksaffsfyghd .encryptedAES .encryptedRSA .encedRSA .justbtcwillhelpyou .btcbtcbtc .btc-help-you .noproblemwedecfiles .only-we_can-help_you .powerfulldecrypt .VforVendetta |
Check for Decryptor › |
| Sanction | .sanction | Check for Decryptor › |
| Satan | .stn | Check for Decryptor › |
| Satana | .[email address_original name] | Check for Decryptor › |
| SerbRansom 2017 | .velikasrbija | Check for Decryptor › |
| Serpent | .serpent | Check for Decryptor › |
| Scraper | No change | Check for Decryptor › |
| SilentShade | .Silent | Check for Decryptor › |
| Simple_Encoder | .~ | Check for Decryptor › |
| SkidLocker / Pompous | .locked | Check for Decryptor › |
| Smrss32 | .encrypted | Check for Decryptor › |
| SNSLocker | .RSNSlocked RSplited |
Check for Decryptor › |
| Spora | no change | Check for Decryptor › |
| Sport | .sport | Check for Decryptor › |
| Stampado | .locked | Check for Decryptor › |
| Strictor | .locked | Check for Decryptor › |
| Surprise | .surprise .tzu |
Check for Decryptor › |
| SZFLocker | .szf | Check for Decryptor › |
| Telecrypt | No change .Xcri |
Check for Decryptor › |
| TeslaCrypt 0.x - 2.2.0 | .vvv .ecc .exx .ezz .abc .aaa .zzz .xyz |
Check for Decryptor › |
| TeslaCrypt 3.0+ | .micro .xxx .ttt .mp3 |
Check for Decryptor › |
| TeslaCrypt 4.1A | .exx .ezz .ecc |
Check for Decryptor › |
| TeslaCrypt 4.2 | .xxx .ttt .micro .mp3 |
Check for Decryptor › |
| TorrentLocker | .Encrypted .ENC |
Check for Decryptor › |
| Toxcrypt | .toxcrypt | Check for Decryptor › |
| Trojan.Encoder.6491 | .enc | Check for Decryptor › |
| Troldesh / Shade | .better_call_saul .xtbl .ytbl .breaking_bad .heisenberg .da_vinci_code .no_more_ransom |
Check for Decryptor › |
| TrueCrypter | .enc | Check for Decryptor › |
| UmbreCrypt | .umbrecrypttmp_ID_[#s] | Check for Decryptor › |
| Ungluk | .H3LL .0x0 .1999 |
Check for Decryptor › |
| VaultCrypt | .vault .xort .trun |
Check for Decryptor › |
| Venus Locker | .Venusf | Check for Decryptor › |
| Virlock | no change | Check for Decryptor › |
| Virus-Encoder | .CrySiS | Check for Decryptor › |
| Wildfire | .wflx | Check for Decryptor › |
| Xorist | .EnCiPhErEd .73i87A .p5tkjw .PoAr2w |
Check for Decryptor › |
| XPTLock | .XPTLock5.0 | Check for Decryptor › |
| XRTN | .xrtn | Check for Decryptor › |
| Zcrypt | .zcrypt | Check for Decryptor › |
| Zlader / Russian | .vault | Check for Decryptor › |
| Zorro | .zorro | Check for Decryptor › |
| Zyka | .lock | Check for Decryptor › |
| Zyklon | .zyklon | Check for Decryptor › |
Sorry, we couldn't find any matches.
Latest decryptor additions (7/5/17)
Ransomware has become a full-blown crisis, with attacks skyrocketing 300% this year alone. We hate ransomware as much as you do, and we think it’s vital to share tools we can all use to fight back. Know of a decryptor tool or a ransomware file extension not on this list? Submit it by contacting us here.
*** Special thanks to Florian Roth and his fellow contributors for inspiring us to create this tool with their fantastic ransomware overview.
Barkly is a new layer of protection you can use to stop ransomware immediately — before it encrypts a single file. You can try it out free here. You’ll even be protected from ransomware that’s brand new and hasn’t been seen before.
Share this:Barkly's Endpoint Protection Platform™ uses Responsive Machine Learning™ to block exploits, fileless attacks, and new file-based malware that AVs routinely miss. Better yet, Barkly does it all with fast, lightweight protection you can manage simply from any desktop or mobile device. Learn more.
© 2017 All Rights Reserved. Barkly is a registered trademark of Barkly Protects, Inc. Privacy Policy and Terms of Service.