RannohDecryptor 1.12.4.7

RannohDecryptor is an effective tool from Kaspersky Lab to combat the Trojan-Ransom.Win32 malware.Rannoh (changes the name and extension of the attacked files) and decrypts the files that were encrypted by it. The malware exploits vulnerabilities in the software and allows criminals to gain almost complete control over the victim's device. Kaspersky's utility allows you to restore access to files encrypted by one of the most dangerous Trojans of recent times. Deletes encrypted files after successful decryption. Does not require installation. Features of the utility:

• It is intended for decrypting files after infection with the following malware:
  • Trojan-Ransom.Win32.Polyglot
  • Trojan-Ransom.Win32.Rannoh
  • Trojan-Ransom.Win32.AutoIt
  • Trojan-Ransom.Win32.Fury
  • Trojan-Ransom.Win32.Crybola
  • Trojan-Ransom.Win32.Cryakl
  • Trojan-Ransom.Win32.CryptXXX versions 1, 2 and 3
• Deletes encrypted files after successful decryption
• By default, it outputs a work report to the root of the disk on which the operating system is installed

To cure the infected system:

• run the file RannohDecryptor.exe on the infected machine
• in the main window, click Start checking
• specify the path to the encrypted and unencrypted file
• if the file is encrypted Trojan-Ransom.Win32.CryptXXX, specify the files of the largest size (decryption will be available only for files of equal or smaller size)
• wait for the end of the search and decryption of encrypted files
• restart the computer if necessary
• to delete a copy of encrypted files of the locked type-&lt,original name&gt,.&lt,4 arbitrary letters&gt, after successful decryption, select Delete encrypted files after successful decryption

In a system infected with Trojan-Ransom.Win32.CryptXXX, the utility scans a limited number of file formats. When a user selects a file affected by CryptXXX v2, key recovery may take a long time.