整理七家防毒軟體公司提供的免費勒索軟體解密工具

作者: Fred Wang (FW知識瑣記) 日期: 2016/6/7 修訂: 2017/6/4

Avast 免費的勒索軟體解密工具
日期 : 2017/6/4
協助解密遭以下各種勒索軟體加密的檔案 : Alcatraz Locker,Apocalypse,BadBlock,Bart,Crypt888,CryptoMix,CrySiS,Globe,HiddenTear,Jigsaw,Legion NoobCrypt,Stampado,SZFLocker,TeslaCrypt

Bitdefender Anti-Ransomware Tool
日期 : 2017/6/4
針對哪種類型的勒索軟體 : CTB-Locker, Locky, Petya, and TeslaCrypt

Emsisoft Decrypter for the file encryption ransomware
日期 : 2017/6/4
針對哪種類型的勒索軟體 : 777,Al-Namrood,Amnesia,Amnesia2,Apocalypse,ApocalypseVM,AutoLocky,BadBlock,Cry128,Cry9,CrypBoss,CryptON,CryptInfinite,CryptoDefense,
Damage,DMALocker,DMALocker2,Fabiansomware,FenixLocker,Globe,Globe2,Globe3,GlobeImposter,Gomasom,HydraCrypt,Harasom,KeyBTC,LeChiffre,MRCR,Marlboro,
Nemucod,NMoreira,OpenToYou,OzozaLocker,PClock,Philadelphia,Radamant,Stampado,Xorist

Kaspersky Anti-Ransomware Tool for Business
Kaspersky Free Ransomware Decryptors
針對哪種類型的勒索軟體 :
1 Rakhni Decryptor : Decrypts files affected by Rakhni, Agent.iih, Aura, Autoit, Pletor, Rotor, Lamer, Cryptokluchen, Lortok, Democry, Bitman
(TeslaCrypt) version 3 and 4, Chimera, Crysis (versions 2 and 3).
2 Rannoh Decryptor : Decrypts files affected by Rannoh, AutoIt, Fury, Cryakl, Crybola, CryptXXX (versions 1, 2 and 3), Polyglot aka Marsjoke.
3 Shade Decryptor : Decrypts files affected by Shade version 1 and 2.
4 CoinVault Decryptor : Decrypts files affected by CoinVault and Bitcryptor.
5 Wildfire Decryptor : Decrypts files affected by Wildfire.
6 Xorist Decryptor : Decrypts files affected by Xorist and Vandev.

Malwarebytes Anti-Ransomware
目前更新日期: 2016/9/16
針對哪種類型的勒索軟體 : CryptoLocker, CryptoWall, CTBLocker, TeslaCrypt, ...(不確定)

Trendmicro 趨勢科技勒索病毒檔案解密工具
目前更新日期: 2017/6/2
針對哪種類型的勒索軟體 :
CryptXXX V1, V2, V3*     {original file name}.crypt, cryp1, crypz, or 5 hexadecimal characters
CryptXXX V4, V5     {MD5 Hash}.5 hexadecimal characters
TeslaCrypt V1**     {original file name}.ECC
TeslaCrypt V2**     {original file name}.VVV, CCC, ZZZ, AAA, ABC, XYZ
TeslaCrypt V3     {original file name}.XXX or TTT or MP3 or MICRO
TeslaCrypt V4     File name and extension are unchanged
SNSLocker     {Original file name}.RSNSLocked
AutoLocky     {Original file name}.locky
BadBlock     {Original file name}
777     {Original file name}.777
XORIST     {Original file name}.xorist or random extension
XORBAT     {Original file name}.crypted
CERBER V1     {10 random characters}.cerber
Stampado     {Original file name}.locked
Nemucod     {Original file name}.crypted
Chimera     {Original file name}.crypt
LECHIFFRE     {Original file name}.LeChiffre
MirCop     Lock.{Original file name}
Jigsaw     {Original file name}.random extension
Globe/Purge     V1: {Original file name}.purge
V2: {Original file name}.{email address + random characters}
V3: Extension not fixed or file name encrypted
DXXD     V1: {Original file name}.{Original extension}dxxd
Teamxrat/Xpan     V2: {Original filename}.__xratteamLucked
Crysis     .{id}.{email address}.xtbl, .{id}.{email address}.crypt, .{id}.{email addres}.dharma, .{id}.{email address}.wallet
TeleCrypt     {Original file name}
DemoTool     .demoadc
WannaCry (WCRY)     {Original file name}.WNCRY, {Original file name}.WCRY

FoolishIT CryptoPrevent
針對哪種類型的勒索軟體 :  CryberLocker...(不確定)