RannohDecryptor – Tool to Decrypt files infected by Ransom Trojan
RannohDecryptor is a tool created by Kaspersky to decrypt files that are affected by ransom programs or also known as Trojan-Ransom.Win32.Rannoh. This tool is provided free and is available in Graphical User Interface (GUI) and Command Line mode.
When ransom Trojan infects a computer, two things may happen. First, it locks the computer and prevents user’s access to files and programs. Second, the threat will encrypt entire files it may find on the infected computer. To decrypt these files, user needs to pay for a ransom, which typically process online.
Not all ransom program infection can trigger file encryption. Please make sure that the infection carried out this action first.
Signs of file encryption attack
When a malware encrypts a file in the main purpose of forcing victims to pay a sum of money in order to decrypt it, you may notice changes in file extension. Typically, file name or extension name is changed with the Trojan’s specific code.
Here are some examples:
Notepad.exe is changed to Notepad.d3s (or any random extension)
Word.exe is changed to Locked-Word.pdje (or any random extension)
Operating System: Windows XP/2003/Vista/Windows 7
Download Link: click Here to begin download
How to Use RannohDecryptor
1. Download RannohDecryptor for the link provided above. This will download the program from the official web site.
2. Save the file to a convenient folder or to your Desktop.
Note: Before running this tool, we highly recommend that you save a backup copy of the entire encrypted files for safety purposes.
3. Double-click on the file RannohDecryptor.exe to launch the tool.
4. Before it starts the process, RannohDecryptor will ask you to browse at least one affected file. Original copy of at least one encrypted file is required to execute proper decryption method.
5. Next, it will search for files similar to what you have browsed earlier.
6. If you want to delete encrypted files after the tool decrypts it, please click on Change parameters and tick necessary option. Click OKto save the settings. This may be necessary to save disc space occupied by the duplicate files. On some instances, we suggest keeping the affected file for a while until proper encryption of affected files is verified.
7. Click on Start scan to begin scan and encryption process.