LUK
05-10-2023, 13:31
El ransomware es una de las amenazas cibernéticas más crueles que existen en la actualidad. Es una forma peligrosa de malware que cifra los archivos y los mantiene como rehenes a cambio de un pago.
Si tu red se infecta con ransomware (https://foro.hackhispano.com/threads/48575-Ransomware-trabajos-previos-15-medidas-efectivas-!!!?highlight=ransomware), sigue los pasos de mitigación que se indican a continuación y utiliza esta lista con más de 170 herramientas de descifrado de ransomware.
https://i.imgur.com/LdZZGVe.png (https://esgeeks.com/herramientas-gratuitas-descifrar-ransomware/)
PASOS PARA RECUPERAR TUS DATOS
https://esgeeks.com/media/2021/10/Recuperar-datos-Ransomware.png
Recuperar datos después de infección por Ransomware
Paso 1: No pagues el rescate porque no hay garantía de que los creadores del ransomware te den acceso a tus datos.
Paso 2: Busca todas las copias de seguridad disponibles que tengas y considera la posibilidad de guardar tus copias de seguridad de datos en ubicaciones seguras y externas.
Paso 3: Si no hay copias de seguridad, tienes que intentar descifrar los datos bloqueados por el ransomware utilizando estos descifradores de ransomware.
CÓMO IDENTIFICAR EL RANSOMWARE CON EL QUE HAS SIDO INFECTADO
A menudo, la nota de rescate proporciona detalles sobre el tipo de ransomware con el que se han cifrado tus archivos, pero puede ocurrir que no tengas esta información a mano. Los lectores nos han pedido que mostremos qué extensiones de cifrado pertenecen a qué familias de ransomware. Muchas de estas extensiones señalan nuevos tipos de malware encriptador, para los que no hay desencriptadores de rescates disponibles.
Si necesitas ayuda para identificar qué tipo de ransomware está afectando a tu sistema para saber qué herramientas de descifrado utilizar, una de las dos opciones siguientes puede ayudarte:
NO MORE RANSOM (https://www.nomoreransom.org/crypto-sheriff.php) de CRYPTO SHERIFF
ID RANSOMWARE (https://id-ransomware.malwarehunterteam.com/) de MALWAREHUNTER TEAM
https://esgeeks.com/media/2021/10/Identificar-tipo-Ransomware.pngIdentificar tipo de Ransomware
HERRAMIENTAS DE DESCIFRADO DE RANSOMWARE: UNA LISTA ACTUALIZADA
Aviso Legal
Debes saber que la lista de abajo no está completa y probablemente nunca lo estará. Utilízala, pero haz también una investigación documentada. Desencriptar tus datos de forma segura puede ser un proceso angustioso, así que intenta ser lo más exhaustivo posible.
Haremos todo lo posible por mantener esta lista actualizada y añadir más herramientas. Las aportaciones y sugerencias son más que bienvenidas, ya que prometemos hacer un seguimiento puntual de las mismas e incluirlas en la lista.
Algunas de las herramientas de descifrado de ransomware que se mencionan a continuación son fáciles de usar, mientras que otras requieren un poco más de conocimiento técnico para descifrarlas. Si no tienes conocimientos técnicos, siempre puedes pedir ayuda en foros de eliminación de malware como Malware removal (https://www.malwareremoval.com/forum/), que cuentan con toneladas de información y comunidades útiles.
.777 ransomware decrypting tool (https://decrypter.emsisoft.com/777)
7even-HONE$T decrypting tool (https://github.com/hasherezade/malware_analysis/tree/master/7ev3n)
.8lock8 ransomware decrypting tool (https://download.bleepingcomputer.com/demonslay335/hidden-tear-bruteforcer.zip) + explicación (http://www.bleepingcomputer.com/forums/t/614025/8lock8-help-support-topic-8lock8-read-ittxt/)
7ev3n decrypting tool (https://github.com/hasherezade/malware_analysis/tree/master/7ev3n)
AES_NI Rakhni Decryptor tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip)
Agent.iih decrypting tool (https://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
Alcatraz Ransom decryptor tool (https://files.avast.com/files/decryptor/avast_decryptor_alcatrazlocker.exe)
Alma ransomware decryption tool (https://cta-service-cms2.hubspot.com/ctas/v2/public/cs/c/?cta_guid=d4173312-989b-4721-ad00-8308fff353b3&placement_guid=22f2fe97-c748-4d6a-9e1e-ba3fb1060abe&portal_id=326665&redirect_url=APefjpGnqFjmP_xzeUZ1Y55ovglY1y1ch7CgM DLit5GTHcW9N0ztpnIE-ZReqqv8MDj687_4Joou7Cd2rSx8-De8uhFQAD_Len9QpT7Xvu8neW5drkdtTPV7hAaou0osAi2O61d izFXibewmpO60UUCd5OazCGz1V6yT_3UFMgL0x9S1VeOvoL_uc uER8g2H3f1EfbtYBw5QFWeUmrjk-9dGzOGspyn303k9XagBtF3SSX4YWSyuEs03Vq7Fxb04KkyKc4G Jx-igK98Qta8iMafUam8ikg8XKPkob0FK6Pe-wRZ0QVWIIkM&hsutk=34612af1cd87864cf7162095872571d1&utm_referrer=https%3A%2F%2Finfo.phishlabs.com%2Fbl og%2Falma-ransomware-analysis-of-a-new-ransomware-threat-and-a-decrypter&canon=https%3A%2F%2Finfo.phishlabs.com%2Fblog%2Fal ma-ransomware-analysis-of-a-new-ransomware-threat-and-a-decrypter&__hstc=61627571.34612af1cd87864cf7162095872571d1.1 472135921345.1472140656779.1472593507113.3&__hssc=61627571.1.1472593507113&__hsfp=1114323283)
Al-Namrood decrypting tool (https://decrypter.emsisoft.com/al-namrood)
Alpha decrypting tool (https://www.bleepingcomputer.com/download/alphadecrypter/)
AlphaLocker decrypting tool (https://www.bleepingcomputer.com/download/alphadecrypter/)
Amnesia Ransom decryptor tool (https://decrypter.emsisoft.com/download/amnesia)
Amnesia Ransom 2 decryptor tool (https://decrypter.emsisoft.com/download/amnesia2)
Anabelle Ransom decryptor tool (https://download.bitdefender.com/am/malware_removal/BDAnnabelleDecryptTool.exe)
Apocalypse decrypting tool (https://decrypter.emsisoft.com/apocalypse)
ApocalypseVM decrypting tool (https://decrypter.emsisoft.com/apocalypsevm) + alternativa (https://www.avg.com/es-es/ransomware-decryption-tools#apocalypse)
Aura decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
AutoIT decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rannohdecryptor.zip) (descifrado por el Rannoh Decryptor)
AutoLT decrypting tool (https://media.kaspersky.com/utilities/VirusUtilities/EN/rannohdecryptor.zip) (descifrado por el Rannoh Decryptor)
Autolocky decrypting tool (https://decrypter.emsisoft.com/autolocky)
Avaddon ransom decryption tool (https://download.bitdefender.com/am/malware_removal/BDAvaddonDecryptor.exe)
Avest ransom decryption tool (https://download.bitdefender.com/am/malware_removal/BDAvaddonDecryptor.exe)
Badblock decrypting tool (https://decrypter.emsisoft.com/badblock) + alternativa 1 (http://www.avg.com/us-en/ransomware-decryption-tools#badblock%20+)
BarRax Ransom decryption tool (http://blog.checkpoint.com/wp-content/uploads/2017/03/BarRaxDecryptor.zip)
Bart decrypting tool (http://www.avg.com/us-en/ransomware-decryption-tools#bart)
BigBobRoss decrypting tool (https://files.avast.com/files/decryptor/avast_decryptor_bigbobross.exe)
BitCryptor decrypting tool (https://www.nomoreransom.org/uploads/CoinVaultDecryptor.zip)
Bitman ransomware versions 2 & 3 (https://media.kaspersky.com/utilities/VirusUtilities/EN/RakhniDecryptor.zip) (descifrado por el Rakhni Decryptor)
BitStak decrypting tool (https://download.bleepingcomputer.com/demonslay335/BitStakDecrypter.zip)
BTCWare Ransom decryptor (https://files.avast.com/files/decryptor/avast_decryptor_btcware.exe)
Cerber decryption tool (https://news.thewindowsclub.com/cerber-ransomware-decrypter-tool-85616/)
Chimera decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) + alternativa 1 (https://www.nomoreransom.org/decryption-tools.html) + alternativa 2 (https://success.trendmicro.com/portal_kb_articledetail?solutionid=1114221)
CheckMail7 ransomware decryption tool (https://www.emsisoft.com/ransomware-decryption-tools/download/checkmail7)
ChernoLocker ransom decryption tool (https://www.emsisoft.com/ransomware-decryption-tools/download/chernolocker)
CoinVault decrypting too (https://www.nomoreransom.org/decryption-tools.html)l (https://www.nomoreransom.org/decryption-tools.html)
Cry128 decrypting tool (https://decrypter.emsisoft.com/download/cry128)
Cry9 Ransom decrypting tool (https://decrypter.emsisoft.com/download/cry9)
Cryakl decrypting tool (https://www.nomoreransom.org/decryption-tools.html) (descifrado por el Rannoh Decryptor)
Crybola decrypting tool (https://www.nomoreransom.org/decryption-tools.html) (descifrado por el Rannoh Decryptor)
CrypBoss ransomware decrypting tool (https://decrypter.emsisoft.com/crypboss)
CryCryptor ransomware decrypting tool (https://github.com/eset/cry-decryptor/releases/download/v1.0/CryDecryptor.apk)
Crypren ransomware decrypting tool (https://github.com/pekeinfo/DecryptCrypren)
Crypt38 ransomware decrypting tool (https://blog.fortinet.com/2016/06/17/buggy-russian-ransomware-inadvertently-allows-free-decryption)
Crypt888 (see also Mircop) decrypting tool (http://www.avg.com/us-en/ransomware-decryption-tools#crypt888)
CryptInfinite decrypting tool (https://decrypter.emsisoft.com/cryptinfinite)
CryptoDefense decrypting tool (https://decrypter.emsisoft.com/cryptodefense)
CryptFile2 decrypting tool (https://files.avast.com/files/decryptor/avast_decryptor_cryptomix.exe) (descifrado por el CryptoMix Decryptor)
CryptoHost (a.k.a. Manamecrypt) decrypting tool (http://www.bleepingcomputer.com/news/security/cryptohost-decrypted-locks-files-in-a-password-protected-rar-file/)
Cryptokluchen decrypting tool (https://www.nomoreransom.org/decryption-tools.html) (descifrado por el Rakhni Decryptor)
CryptoMix Ransom decrypting tool (https://nomoreransom.cert.pl/static/cryptomix_decryptor.exe) ++ Alternativa offline (https://files.avast.com/files/decryptor/avast_decryptor_cryptomix.exe)
CryptON decryption tool (https://www.bleepingcomputer.com/news/security/emsisoft-releases-a-decryptor-for-the-crypton-ransomware/)
CryptoTorLocker decrypting tool (http://www.bleepingcomputer.com/forums/t/565020/new-cryptotorlocker2015-ransomware-discovered-and-easily-decrypted/)
CryptXXX decrypting tool (https://blog.kaspersky.com/cryptxxx-decryption-20/12091/)
CrySIS decrypting tool (https://www.nomoreransom.org/decryption-tools.html) (descifrado por el Rakhni Decryptor – detalles adicionales (https://www.bleepingcomputer.com/news/security/master-decryption-keys-and-decryptor-for-the-crysis-ransomware-released-/))
CuteRansomware decrypting tool (https://github.com/aaaddress1/my-Little-Ransomware/tree/master/decryptoTool) (descifrado por el my-Little-Ransomware Decryptor)
Cyborg ransomware decryption tool (https://www.emsisoft.com/ransomware-decryption-tools/download/cyborg)
Damage ransom decrypting tool (https://decrypter.emsisoft.com/download/damage)
Darkside ransomware decryption tool (https://labs.bitdefender.com/2021/01/darkside-ransomware-decryption-tool/)
DemoTool decrypting tool (https://solutionfile.trendmicro.com/solutionfile/Ransomware%20Decryption%20Tool/RansomwareFileDecryptor%201.0.1668%20MUI.zip)
Dharma Ransom Rakhni decryptor tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip)
DeCrypt Protect decrypting tool (http://tmp.emsisoft.com/fw/decrypt_mblblock.exe)
Democry decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
Derialock ransom decryptor tool (https://www.nomoreransom.org/en/decryption-tools.html)
Dharma Decryptor (https://www.nomoreransom.org/decryption-tools.html)
DMA Locker decrypting tool (https://decrypter.emsisoft.com/dmalocker) + DMA2 Locker decoding tool (https://decrypter.emsisoft.com/dmalocker2)
DragonCyber ransomware decryption tool (https://www.emsisoft.com/ransomware-decryption-tools/download/jigsaw)
DXXD ransomware decryption tool (https://success.trendmicro.com/solution/1114221)
Encryptile decrypting tool (https://blog.avast.com/avast-releases-free-decryption-tool-for-encryptile-ransomware)
ElvisPresley ransomware decryption tool (https://www.emsisoft.com/ransomware-decryption-tools/download/jigsaw) (descifrado por el Jigsaw Decryptor)
Everbe Ransomware decrypting tool (https://www.bleepingcomputer.com/news/security/decryptor-released-for-the-everbe-ransomware/)
Fabiansomware decrypting tool (https://decrypter.emsisoft.com/fabiansomware)
FenixLocker – decrypting tool (https://decrypter.emsisoft.com/fenixlocker)
FilesLocker decrypting tool (https://www.bleepingcomputer.com/ransomware/decryptor/how-to-decrypt-the-fileslocker-ransomware-with-fileslockerdecrypter/)
FindZip decrypting tool (https://files.avast.com/files/decryptor/avast_decryptor_findzip.exe)
FortuneCrypt decrypting tool (https://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
Fonix ransomware decryption tool (https://files.avast.com/files/decryptor/avast_decryptor_fonix.exe)
Fury decrypting tool (https://www.nomoreransom.org/decryption-tools.html) (descifrado por el Rannoh Decryptor)
GalactiCryper ransom decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/galacticrypter)
GandCrab decrypting tool (https://labs.bitdefender.com/2018/02/gandcrab-ransomware-decryption-tool-available-for-free/)
GetCrypt decryption tool (https://www.emsisoft.com/decrypter/download/getcrypt)
GhostCrypt decrypting tool (https://download.bleepingcomputer.com/demonslay335/GhostCryptDecrypter.zip)
Globe / Purge decrypting tool (https://decrypter.emsisoft.com/) + alternativa (https://success.trendmicro.com/portal_kb_articledetail?solutionid=1114221)
Globe2 decryption tool (https://decrypter.emsisoft.com/download/globe2)
Globe3 decryption tool (http://blog.emsisoft.com/2017/01/04/emsisoft-releases-free-decrypter-for-globe3-ransomware/)
GlobeImpostor decryption tool (https://decrypter.emsisoft.com/download/globeimposter)
Gomasom decrypting tool (https://decrypter.emsisoft.com/gomasom)
GoGoogle decryption tool (https://labs.bitdefender.com/2020/05/gogoogle-decryption-tool/)
Hacked decrypting tool (https://www.bleepingcomputer.com/ransomware/decryptor/emsisoft-has-released-a-decryptor-for-the-hacked-ransomware/)
Hakbit decryptor (https://blog.emsisoft.com/en/34716/emsisoft-releases-a-new-decryptor-for-hakbit-ransomware/)
Harasom decrypting tool (https://decrypter.emsisoft.com/harasom)
HydraCrypt decrypting tool (https://decrypter.emsisoft.com/hydracrypt)
HiddenTear decrypting tool (https://files.avast.com/files/decryptor/avast_decryptor_hiddentear.exe)
HildraCrypt decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/hildacrypt)
HKCrypt ransom decryptor (https://decrypter.emsisoft.com/download/hkcrypt)
Iams00rry decryptor (https://www.emsisoft.com/decrypter/ims00rry)
InsaneCrypt ransomware decryptor (https://www.bleepingcomputer.com/download/insanecrypt-desucrypt-decrypter/dl/369/)
Iwanttits ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/ransomwared)
Jaff decrypter tool (http://www.bankinfosecurity.com/two-new-ransomware-decryptors-give-victims-free-out-a-9998)
JavaLocker decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/javalocker)
Jigsaw/CryptoHit decrypting tool (https://blog.checkpoint.com/wp-content/uploads/2016/07/JPS_release.zip) + alternativa (http://www.bleepingcomputer.com/download/jigsaw-decrypter/)
JS WORM 2.0 decryptor (https://www.emsisoft.com/decrypter/download/jsworm-20)
JS WORM 4.0 decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/jsworm-40)
Judge ransomware decryptor (https://mdsassets.blob.core.windows.net/downloads/Judge-Decryptor.exe)
KeRanger decrypting tool (http://news.drweb.com/show/?i=9877&lng=en&c=5)
KeyBTC decrypting tool (https://decrypter.emsisoft.com/keybtc)
KimcilWare decrypting tool (https://blog.fortinet.com/2016/04/01/kimcilware-ransomware-how-to-decrypt-encrypted-files-and-who-is-behind-it)
KokoKrypt decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/kokokrypt)
Lamer decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
LambdaLocker decryption tool (https://files.avast.com/files/decryptor/avast_decryptor_lambdalocker.exe)
LeChiffre decrypting tool (https://success.trendmicro.com/portal_kb_articledetail?solutionid=1114221) + alternativa (https://decrypter.emsisoft.com/lechiffre)
Legion decrypting tool (http://www.avg.com/us-en/ransomware-decryption-tools#legion)
Linux.Encoder decrypting tool (https://labs.bitdefender.com/2015/11/linux-ransomware-debut-fails-on-predictable-encryption-key/)
Lobzik decrypting tool (https://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
Lock Screen ransomware decrypting tool (https://esupport.trendmicro.com/en-us/home/pages/technical-support/1105975.aspx)
Locker decrypting tool (http://www.bleepingcomputer.com/forums/t/577246/locker-ransomware-support-and-help-topic/page-32#entry3721545)
Loocipher decryptor (https://www.emsisoft.com/decrypter/loocipher)
Lorenz ransomware decryptor (https://mdsassets.blob.core.windows.net/downloads/Lorenz-Decryptor.exe)
Lortok decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
MacRansom decrypting tool (https://esupport.trendmicro.com/media/13801530/Trend%20Micro%20Ransomware%20Decryptor_V1.0.1.zip)
Magniber decryptor (https://seed.kisa.or.kr/kisa/Board/56/detailView.do)
MaMoCrypt ransomware decryption tool (https://labs.bitdefender.com/2020/10/mamocrypt-ransomware-decryption-tool/)
Mapo ransomware decryptor (https://nomoreransom.cert.pl/static/mapo_decryptor.exe)
Marlboro ransom decryption tool (https://decrypter.emsisoft.com/download/marlboro)
MarsJoke decryption tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rannohdecryptor.zip)
Manamecrypt decrypting tool (a.k.a. CryptoHost) (http://www.bleepingcomputer.com/news/security/cryptohost-decrypted-locks-files-in-a-password-protected-rar-file/)
Mircop decrypting tool (http://now.avg.com/dont-pay-the-ransom-avg-releases-six-free-decryption-tools-to-retrieve-your-files/) + alternativa (https://success.trendmicro.com/portal_kb_articledetail?solutionid=1114221)
Mira ransom decryptor (https://download.f-secure.com/support/tools/Mira-decryptor/Mira%20Ransomware%20Decryptor.zip)
MegaLocker ransomware decrypting tool (https://www.emsisoft.com/decrypter/download/megalocker)
Merry Christmas / MRCR decryptor (https://decrypter.emsisoft.com/mrcr)
Mole decryptor tool (https://nomoreransom.cert.pl/static/mole_decryptor.exe)
MoneroPay Ransomware decrypting tool (https://nioguard.blogspot.com.br/2018/02/decryptor-for-moneropay-ransomware.html)
muhstik ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/muhstik)
my-Little-Ransomware decrypting tool (https://github.com/aaaddress1/my-Little-Ransomware/tree/master/decryptoTool)
Nanolocker decrypting tool (https://github.com/Cyberclues/nanolocker-decryptor)
Nemty ransomware decryptor (https://mdsassets.blob.core.windows.net/downloads/NemtyDecryptor.exe)
Nemucod decrypting tool (https://heimdalsecurity.com/blog/security-alert-malicious-script-injections-cerber-nemucod/) + alternativa (https://decrypter.emsisoft.com/nemucod)
NMoreira ransomware decryption tool (https://decrypter.emsisoft.com/download/nmoreira)
Noobcrypt decryption tool (https://files.avast.com/files/decryptor/avast_decryptor_noobcrypt.exe)
ODCODC decrypting tool (http://download.bleepingcomputer.com/BloodDolly/ODCODCDecoder.zip)
OpenToYou decryption tools (http://blog.emsisoft.com/2016/12/30/emsisoft-releases-free-decrypter-for-opentoyou-ransomware/)
Operation Global III Ransomware decrypting tool (http://www.bleepingcomputer.com/forums/t/559220/operation-global-iii-ransomware-not-only-encrypts-but-infects-your-data-as-well/)
Ouroboros ransomware decryptor (https://labs.bitdefender.com/2019/10/ouroboros-ransomware-decryption-tool/)
Ozozalocker ransomware decryptor (https://decrypter.emsisoft.com/download/ozozalocker)
Paradise ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/paradise)
PClock decrypting tool (https://decrypter.emsisoft.com/pclock)
Petya decrypting tool (http://www.thewindowsclub.com/petya-ransomware-decrypt-tool-password-generator) + alternativa (https://www.bleepingcomputer.com/news/security/author-of-original-petya-ransomware-publishes-master-decryption-key/)
PewCrypt ransom decryptor (https://decrypter.emsisoft.com/download/pewcrypt)
Philadelphia decrypting tool (https://decrypter.emsisoft.com/download/philadelphia)
PizzaCrypts decrypting tool (http://download.bleepingcomputer.com/BloodDolly/JuicyLemonDecoder.zip)
Planetary ransomware decrypting tool (https://www.bleepingcomputer.com/ransomware/decryptor/planetary-ransomware-decryptor-gets-your-files-back-for-free/)
Pletor decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
Polyglot decrypting tool (https://media.kaspersky.com/utilities/VirusUtilities/EN/rannohdecryptor.zip) (descifrado por el Rannoh Decryptor)
Pompous decrypting tool (http://www.bleepingcomputer.com/news/security/pompous-ransomware-dev-gets-defeated-by-backdoor/)
PowerWare / PoshCoder decrypting tool (https://www.helpnetsecurity.com/2016/07/22/powerware-ransomware-decrypter/)
Popcorn Ransom decrypting tool (https://www.nomoreransom.org/en/decryption-tools.html)
Professeur ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/jigsaw) (descifrado por el Jigsaw Decryptor)
PyLocky Ransomware decrypting tool (https://thehackernews.com/2019/01/pylocky-free-ransomware-decryption.html)
Radamant decrypting tool (https://decrypter.emsisoft.com/radamant)
RAGNAROK decrypting tool (https://www.emsisoft.com/ransomware-decryption-tools/download/ragnarok)
Rakhni decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip)
Rannoh decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rannohdecryptor.zip)
Ransomwared decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/ransomwared)
Rector decrypting tool (https://support.kaspersky.com/viruses/disinfection/4264)
RedRum ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/redrum)
Rotor decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
Scraper decrypting tool (https://securelist.com/a-flawed-ransomware-encryptor/69481/)
SimpleLocker ransomware decryptor (https://seed.kisa.or.kr/kisa/Board/57/detailView.do)
Simplocker ransomware decryptor (https://download.eset.com/com/eset/tools/decryptors/simplocker/latest/eset-simplocker-decryptor.apk)
Shade / Troldesh decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/ShadeDecryptor.exe) + alternativa (http://www.mcafee.com/us/downloads/free-tools/shadedecrypt.aspx)
SNSLocker decrypting tool (https://success.trendmicro.com/portal_kb_articledetail?solutionid=1114221)
SpartCrypt decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/spartcrypt)
Stampado decrypting tool (https://heimdalsecurity.com/blog/security-alert-stampado-ransomware-on-sale/) + alternativa (https://decrypter.emsisoft.com/stampado)
STOP Djvu Ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/stop-djvu)
SynAck ransom decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/synack)
Syrk ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/syrk)
SZFlocker decrypting tool (http://www.avg.com/us-en/ransomware-decryption-tools#szflocker)
Teamxrat / Xpan decryption tool (https://success.trendmicro.com/solution/1114221)
TeleCrypt decrypting tool (https://malwarebytes.app.box.com/s/kkxwgzbpwe7oh59xqfwcz97uk0q05kp3) (detalles adicionales (https://blog.malwarebytes.com/threat-analysis/2016/11/telecrypt-the-ransomware-abusing-telegram-api-defeated/))
TeslaCrypt decrypting tool (http://talosintel.com/teslacrypt_tool/) + alternativa 1 (http://www.avg.com/us-en/ransomware-decryption-tools#teslacrypt) + alternativa 2 (https://www.nomoreransom.org/decryption-tools.html)
Thanatos decryption tool (https://blog.talosintelligence.com/2018/06/ThanatosDecryptor.html)
ThunderX decryptor (https://mdsassets.blob.core.windows.net/downloads/ThunderX-Decryptor.exe)
Trustezeb.A decryptor (https://download.eset.com/com/eset/tools/decryptors/trustezeb_a/latest/esettrustezebadecoder.exe)
TurkStatic Decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/turkstatik)
TorrentLocker decrypting tool (http://www.bleepingcomputer.com/forums/t/547708/torrentlocker-ransomware-cracked-and-decrypter-has-been-made/)
Umbrecrypt decrypting tool (http://www.thewindowsclub.com/emsisoft-decrypter-hydracrypt-umbrecrypt-ransomware)
VCRYPTOR Decryptor (https://www.elevenpaths.com/downloads/vcrypt_decryptor.zip)
Wildfire decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/RU/WildfireDecryptor.zip) ++ alternativa (http://www.mcafee.com/us/downloads/free-tools/wildfiredecrypt.aspx)
WannaCry decryption tool (https://github.com/gentilkiwi/wanakiwi/releases) + Guía (https://blog.comae.io/wannacry-decrypting-files-with-wanakiwi-demo-86bafb81112d)
WannaRen decryption tool (https://labs.bitdefender.com/2020/08/wannaren-decryption-tool/)
XData Ransom decryption tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip)
XORBAT decrypting tool (https://success.trendmicro.com/portal_kb_articledetail?solutionid=1114221)
XORIST decrypting tool (https://success.trendmicro.com/portal_kb_articledetail?solutionid=1114221) + alternativa (https://decrypter.emsisoft.com/xorist)
Yatron decrypting tool (https://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el the Rakhni Decryptor)
ZeroFucks decryptor (https://www.emsisoft.com/decrypter/zerofucks)
Zeta decrypting tool (https://files.avast.com/files/decryptor/avast_decryptor_cryptomix.exe) (descifrado por el CryptoMix Decryptor)
Ziggy ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/ziggy)
Zorab ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/zorab)
ZQ ransomware decryptor (https://www.emsisoft.com/decrypter/download/zq)
FAMILIAS DE RANSOMWARE FRENTE A HERRAMIENTAS DE DESCIFRADO DE RANSOMWARE
Como habrá notado, algunos de estos desencriptadores de ransomware funcionan para varias familias de ransomware, mientras que ciertas cepas tienen más de una solución (aunque esto no suele ser el caso).
Desde un punto de vista práctico, algunos de los desencriptadores son fáciles de usar, pero otros requieren algunos conocimientos técnicos. Por mucho que queramos que este proceso sea más fácil, no siempre ocurre.
Por mucho trabajo y tiempo que dediquen los investigadores a la ingeniería inversa del criptoware, lo cierto es que nunca tendremos una solución para todas estas infecciones. Haría falta un ejército de especialistas en ciberseguridad trabajando sin descanso para conseguir algo así.
CÓMO EVITAR EL RANSOMWARE EN EL FUTURO
Una de las formas más eficaces de evitar que la amenaza del ransomware cause estragos y bloquee tus datos sensibles es permanecer atento y ser proactivo.
De hecho, te recomendamos encarecidamente que apliques estos consejos descritos a continuación, como un el plan de seguridad contra el ransomware, que pueden ayudarte a prevenir este tipo de ciberataque.
Copias de seguridad sin conexión
Concienciación del personal
Filtro de spam
Bloquear los ejecutables
Bloquear los archivos JavaScript maliciosos
Restringir el uso de privilegios elevados
Parchear rápidamente el software
Confianza cero
Priorizar los activos y evaluar el tráfico
Actualizar el software antiransomware
A medida que surgen nuevos tipos de ransomware, los investigadores desencriptan algunas cepas, pero otras obtienen nuevas variantes, y puede parecer un juego del gato y el ratón, en el que la proactividad es vital. Pagar el rescate nunca garantiza que se recuperen los datos, ya que podrían acabar a la venta en la Dark Web.
Fuente: EsGeeks (https://esgeeks.com/herramientas-gratuitas-descifrar-ransomware/)
Si tu red se infecta con ransomware (https://foro.hackhispano.com/threads/48575-Ransomware-trabajos-previos-15-medidas-efectivas-!!!?highlight=ransomware), sigue los pasos de mitigación que se indican a continuación y utiliza esta lista con más de 170 herramientas de descifrado de ransomware.
https://i.imgur.com/LdZZGVe.png (https://esgeeks.com/herramientas-gratuitas-descifrar-ransomware/)
PASOS PARA RECUPERAR TUS DATOS
https://esgeeks.com/media/2021/10/Recuperar-datos-Ransomware.png
Recuperar datos después de infección por Ransomware
Paso 1: No pagues el rescate porque no hay garantía de que los creadores del ransomware te den acceso a tus datos.
Paso 2: Busca todas las copias de seguridad disponibles que tengas y considera la posibilidad de guardar tus copias de seguridad de datos en ubicaciones seguras y externas.
Paso 3: Si no hay copias de seguridad, tienes que intentar descifrar los datos bloqueados por el ransomware utilizando estos descifradores de ransomware.
CÓMO IDENTIFICAR EL RANSOMWARE CON EL QUE HAS SIDO INFECTADO
A menudo, la nota de rescate proporciona detalles sobre el tipo de ransomware con el que se han cifrado tus archivos, pero puede ocurrir que no tengas esta información a mano. Los lectores nos han pedido que mostremos qué extensiones de cifrado pertenecen a qué familias de ransomware. Muchas de estas extensiones señalan nuevos tipos de malware encriptador, para los que no hay desencriptadores de rescates disponibles.
Si necesitas ayuda para identificar qué tipo de ransomware está afectando a tu sistema para saber qué herramientas de descifrado utilizar, una de las dos opciones siguientes puede ayudarte:
NO MORE RANSOM (https://www.nomoreransom.org/crypto-sheriff.php) de CRYPTO SHERIFF
ID RANSOMWARE (https://id-ransomware.malwarehunterteam.com/) de MALWAREHUNTER TEAM
https://esgeeks.com/media/2021/10/Identificar-tipo-Ransomware.pngIdentificar tipo de Ransomware
HERRAMIENTAS DE DESCIFRADO DE RANSOMWARE: UNA LISTA ACTUALIZADA
Aviso Legal
Debes saber que la lista de abajo no está completa y probablemente nunca lo estará. Utilízala, pero haz también una investigación documentada. Desencriptar tus datos de forma segura puede ser un proceso angustioso, así que intenta ser lo más exhaustivo posible.
Haremos todo lo posible por mantener esta lista actualizada y añadir más herramientas. Las aportaciones y sugerencias son más que bienvenidas, ya que prometemos hacer un seguimiento puntual de las mismas e incluirlas en la lista.
Algunas de las herramientas de descifrado de ransomware que se mencionan a continuación son fáciles de usar, mientras que otras requieren un poco más de conocimiento técnico para descifrarlas. Si no tienes conocimientos técnicos, siempre puedes pedir ayuda en foros de eliminación de malware como Malware removal (https://www.malwareremoval.com/forum/), que cuentan con toneladas de información y comunidades útiles.
.777 ransomware decrypting tool (https://decrypter.emsisoft.com/777)
7even-HONE$T decrypting tool (https://github.com/hasherezade/malware_analysis/tree/master/7ev3n)
.8lock8 ransomware decrypting tool (https://download.bleepingcomputer.com/demonslay335/hidden-tear-bruteforcer.zip) + explicación (http://www.bleepingcomputer.com/forums/t/614025/8lock8-help-support-topic-8lock8-read-ittxt/)
7ev3n decrypting tool (https://github.com/hasherezade/malware_analysis/tree/master/7ev3n)
AES_NI Rakhni Decryptor tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip)
Agent.iih decrypting tool (https://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
Alcatraz Ransom decryptor tool (https://files.avast.com/files/decryptor/avast_decryptor_alcatrazlocker.exe)
Alma ransomware decryption tool (https://cta-service-cms2.hubspot.com/ctas/v2/public/cs/c/?cta_guid=d4173312-989b-4721-ad00-8308fff353b3&placement_guid=22f2fe97-c748-4d6a-9e1e-ba3fb1060abe&portal_id=326665&redirect_url=APefjpGnqFjmP_xzeUZ1Y55ovglY1y1ch7CgM DLit5GTHcW9N0ztpnIE-ZReqqv8MDj687_4Joou7Cd2rSx8-De8uhFQAD_Len9QpT7Xvu8neW5drkdtTPV7hAaou0osAi2O61d izFXibewmpO60UUCd5OazCGz1V6yT_3UFMgL0x9S1VeOvoL_uc uER8g2H3f1EfbtYBw5QFWeUmrjk-9dGzOGspyn303k9XagBtF3SSX4YWSyuEs03Vq7Fxb04KkyKc4G Jx-igK98Qta8iMafUam8ikg8XKPkob0FK6Pe-wRZ0QVWIIkM&hsutk=34612af1cd87864cf7162095872571d1&utm_referrer=https%3A%2F%2Finfo.phishlabs.com%2Fbl og%2Falma-ransomware-analysis-of-a-new-ransomware-threat-and-a-decrypter&canon=https%3A%2F%2Finfo.phishlabs.com%2Fblog%2Fal ma-ransomware-analysis-of-a-new-ransomware-threat-and-a-decrypter&__hstc=61627571.34612af1cd87864cf7162095872571d1.1 472135921345.1472140656779.1472593507113.3&__hssc=61627571.1.1472593507113&__hsfp=1114323283)
Al-Namrood decrypting tool (https://decrypter.emsisoft.com/al-namrood)
Alpha decrypting tool (https://www.bleepingcomputer.com/download/alphadecrypter/)
AlphaLocker decrypting tool (https://www.bleepingcomputer.com/download/alphadecrypter/)
Amnesia Ransom decryptor tool (https://decrypter.emsisoft.com/download/amnesia)
Amnesia Ransom 2 decryptor tool (https://decrypter.emsisoft.com/download/amnesia2)
Anabelle Ransom decryptor tool (https://download.bitdefender.com/am/malware_removal/BDAnnabelleDecryptTool.exe)
Apocalypse decrypting tool (https://decrypter.emsisoft.com/apocalypse)
ApocalypseVM decrypting tool (https://decrypter.emsisoft.com/apocalypsevm) + alternativa (https://www.avg.com/es-es/ransomware-decryption-tools#apocalypse)
Aura decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
AutoIT decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rannohdecryptor.zip) (descifrado por el Rannoh Decryptor)
AutoLT decrypting tool (https://media.kaspersky.com/utilities/VirusUtilities/EN/rannohdecryptor.zip) (descifrado por el Rannoh Decryptor)
Autolocky decrypting tool (https://decrypter.emsisoft.com/autolocky)
Avaddon ransom decryption tool (https://download.bitdefender.com/am/malware_removal/BDAvaddonDecryptor.exe)
Avest ransom decryption tool (https://download.bitdefender.com/am/malware_removal/BDAvaddonDecryptor.exe)
Badblock decrypting tool (https://decrypter.emsisoft.com/badblock) + alternativa 1 (http://www.avg.com/us-en/ransomware-decryption-tools#badblock%20+)
BarRax Ransom decryption tool (http://blog.checkpoint.com/wp-content/uploads/2017/03/BarRaxDecryptor.zip)
Bart decrypting tool (http://www.avg.com/us-en/ransomware-decryption-tools#bart)
BigBobRoss decrypting tool (https://files.avast.com/files/decryptor/avast_decryptor_bigbobross.exe)
BitCryptor decrypting tool (https://www.nomoreransom.org/uploads/CoinVaultDecryptor.zip)
Bitman ransomware versions 2 & 3 (https://media.kaspersky.com/utilities/VirusUtilities/EN/RakhniDecryptor.zip) (descifrado por el Rakhni Decryptor)
BitStak decrypting tool (https://download.bleepingcomputer.com/demonslay335/BitStakDecrypter.zip)
BTCWare Ransom decryptor (https://files.avast.com/files/decryptor/avast_decryptor_btcware.exe)
Cerber decryption tool (https://news.thewindowsclub.com/cerber-ransomware-decrypter-tool-85616/)
Chimera decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) + alternativa 1 (https://www.nomoreransom.org/decryption-tools.html) + alternativa 2 (https://success.trendmicro.com/portal_kb_articledetail?solutionid=1114221)
CheckMail7 ransomware decryption tool (https://www.emsisoft.com/ransomware-decryption-tools/download/checkmail7)
ChernoLocker ransom decryption tool (https://www.emsisoft.com/ransomware-decryption-tools/download/chernolocker)
CoinVault decrypting too (https://www.nomoreransom.org/decryption-tools.html)l (https://www.nomoreransom.org/decryption-tools.html)
Cry128 decrypting tool (https://decrypter.emsisoft.com/download/cry128)
Cry9 Ransom decrypting tool (https://decrypter.emsisoft.com/download/cry9)
Cryakl decrypting tool (https://www.nomoreransom.org/decryption-tools.html) (descifrado por el Rannoh Decryptor)
Crybola decrypting tool (https://www.nomoreransom.org/decryption-tools.html) (descifrado por el Rannoh Decryptor)
CrypBoss ransomware decrypting tool (https://decrypter.emsisoft.com/crypboss)
CryCryptor ransomware decrypting tool (https://github.com/eset/cry-decryptor/releases/download/v1.0/CryDecryptor.apk)
Crypren ransomware decrypting tool (https://github.com/pekeinfo/DecryptCrypren)
Crypt38 ransomware decrypting tool (https://blog.fortinet.com/2016/06/17/buggy-russian-ransomware-inadvertently-allows-free-decryption)
Crypt888 (see also Mircop) decrypting tool (http://www.avg.com/us-en/ransomware-decryption-tools#crypt888)
CryptInfinite decrypting tool (https://decrypter.emsisoft.com/cryptinfinite)
CryptoDefense decrypting tool (https://decrypter.emsisoft.com/cryptodefense)
CryptFile2 decrypting tool (https://files.avast.com/files/decryptor/avast_decryptor_cryptomix.exe) (descifrado por el CryptoMix Decryptor)
CryptoHost (a.k.a. Manamecrypt) decrypting tool (http://www.bleepingcomputer.com/news/security/cryptohost-decrypted-locks-files-in-a-password-protected-rar-file/)
Cryptokluchen decrypting tool (https://www.nomoreransom.org/decryption-tools.html) (descifrado por el Rakhni Decryptor)
CryptoMix Ransom decrypting tool (https://nomoreransom.cert.pl/static/cryptomix_decryptor.exe) ++ Alternativa offline (https://files.avast.com/files/decryptor/avast_decryptor_cryptomix.exe)
CryptON decryption tool (https://www.bleepingcomputer.com/news/security/emsisoft-releases-a-decryptor-for-the-crypton-ransomware/)
CryptoTorLocker decrypting tool (http://www.bleepingcomputer.com/forums/t/565020/new-cryptotorlocker2015-ransomware-discovered-and-easily-decrypted/)
CryptXXX decrypting tool (https://blog.kaspersky.com/cryptxxx-decryption-20/12091/)
CrySIS decrypting tool (https://www.nomoreransom.org/decryption-tools.html) (descifrado por el Rakhni Decryptor – detalles adicionales (https://www.bleepingcomputer.com/news/security/master-decryption-keys-and-decryptor-for-the-crysis-ransomware-released-/))
CuteRansomware decrypting tool (https://github.com/aaaddress1/my-Little-Ransomware/tree/master/decryptoTool) (descifrado por el my-Little-Ransomware Decryptor)
Cyborg ransomware decryption tool (https://www.emsisoft.com/ransomware-decryption-tools/download/cyborg)
Damage ransom decrypting tool (https://decrypter.emsisoft.com/download/damage)
Darkside ransomware decryption tool (https://labs.bitdefender.com/2021/01/darkside-ransomware-decryption-tool/)
DemoTool decrypting tool (https://solutionfile.trendmicro.com/solutionfile/Ransomware%20Decryption%20Tool/RansomwareFileDecryptor%201.0.1668%20MUI.zip)
Dharma Ransom Rakhni decryptor tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip)
DeCrypt Protect decrypting tool (http://tmp.emsisoft.com/fw/decrypt_mblblock.exe)
Democry decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
Derialock ransom decryptor tool (https://www.nomoreransom.org/en/decryption-tools.html)
Dharma Decryptor (https://www.nomoreransom.org/decryption-tools.html)
DMA Locker decrypting tool (https://decrypter.emsisoft.com/dmalocker) + DMA2 Locker decoding tool (https://decrypter.emsisoft.com/dmalocker2)
DragonCyber ransomware decryption tool (https://www.emsisoft.com/ransomware-decryption-tools/download/jigsaw)
DXXD ransomware decryption tool (https://success.trendmicro.com/solution/1114221)
Encryptile decrypting tool (https://blog.avast.com/avast-releases-free-decryption-tool-for-encryptile-ransomware)
ElvisPresley ransomware decryption tool (https://www.emsisoft.com/ransomware-decryption-tools/download/jigsaw) (descifrado por el Jigsaw Decryptor)
Everbe Ransomware decrypting tool (https://www.bleepingcomputer.com/news/security/decryptor-released-for-the-everbe-ransomware/)
Fabiansomware decrypting tool (https://decrypter.emsisoft.com/fabiansomware)
FenixLocker – decrypting tool (https://decrypter.emsisoft.com/fenixlocker)
FilesLocker decrypting tool (https://www.bleepingcomputer.com/ransomware/decryptor/how-to-decrypt-the-fileslocker-ransomware-with-fileslockerdecrypter/)
FindZip decrypting tool (https://files.avast.com/files/decryptor/avast_decryptor_findzip.exe)
FortuneCrypt decrypting tool (https://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
Fonix ransomware decryption tool (https://files.avast.com/files/decryptor/avast_decryptor_fonix.exe)
Fury decrypting tool (https://www.nomoreransom.org/decryption-tools.html) (descifrado por el Rannoh Decryptor)
GalactiCryper ransom decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/galacticrypter)
GandCrab decrypting tool (https://labs.bitdefender.com/2018/02/gandcrab-ransomware-decryption-tool-available-for-free/)
GetCrypt decryption tool (https://www.emsisoft.com/decrypter/download/getcrypt)
GhostCrypt decrypting tool (https://download.bleepingcomputer.com/demonslay335/GhostCryptDecrypter.zip)
Globe / Purge decrypting tool (https://decrypter.emsisoft.com/) + alternativa (https://success.trendmicro.com/portal_kb_articledetail?solutionid=1114221)
Globe2 decryption tool (https://decrypter.emsisoft.com/download/globe2)
Globe3 decryption tool (http://blog.emsisoft.com/2017/01/04/emsisoft-releases-free-decrypter-for-globe3-ransomware/)
GlobeImpostor decryption tool (https://decrypter.emsisoft.com/download/globeimposter)
Gomasom decrypting tool (https://decrypter.emsisoft.com/gomasom)
GoGoogle decryption tool (https://labs.bitdefender.com/2020/05/gogoogle-decryption-tool/)
Hacked decrypting tool (https://www.bleepingcomputer.com/ransomware/decryptor/emsisoft-has-released-a-decryptor-for-the-hacked-ransomware/)
Hakbit decryptor (https://blog.emsisoft.com/en/34716/emsisoft-releases-a-new-decryptor-for-hakbit-ransomware/)
Harasom decrypting tool (https://decrypter.emsisoft.com/harasom)
HydraCrypt decrypting tool (https://decrypter.emsisoft.com/hydracrypt)
HiddenTear decrypting tool (https://files.avast.com/files/decryptor/avast_decryptor_hiddentear.exe)
HildraCrypt decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/hildacrypt)
HKCrypt ransom decryptor (https://decrypter.emsisoft.com/download/hkcrypt)
Iams00rry decryptor (https://www.emsisoft.com/decrypter/ims00rry)
InsaneCrypt ransomware decryptor (https://www.bleepingcomputer.com/download/insanecrypt-desucrypt-decrypter/dl/369/)
Iwanttits ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/ransomwared)
Jaff decrypter tool (http://www.bankinfosecurity.com/two-new-ransomware-decryptors-give-victims-free-out-a-9998)
JavaLocker decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/javalocker)
Jigsaw/CryptoHit decrypting tool (https://blog.checkpoint.com/wp-content/uploads/2016/07/JPS_release.zip) + alternativa (http://www.bleepingcomputer.com/download/jigsaw-decrypter/)
JS WORM 2.0 decryptor (https://www.emsisoft.com/decrypter/download/jsworm-20)
JS WORM 4.0 decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/jsworm-40)
Judge ransomware decryptor (https://mdsassets.blob.core.windows.net/downloads/Judge-Decryptor.exe)
KeRanger decrypting tool (http://news.drweb.com/show/?i=9877&lng=en&c=5)
KeyBTC decrypting tool (https://decrypter.emsisoft.com/keybtc)
KimcilWare decrypting tool (https://blog.fortinet.com/2016/04/01/kimcilware-ransomware-how-to-decrypt-encrypted-files-and-who-is-behind-it)
KokoKrypt decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/kokokrypt)
Lamer decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
LambdaLocker decryption tool (https://files.avast.com/files/decryptor/avast_decryptor_lambdalocker.exe)
LeChiffre decrypting tool (https://success.trendmicro.com/portal_kb_articledetail?solutionid=1114221) + alternativa (https://decrypter.emsisoft.com/lechiffre)
Legion decrypting tool (http://www.avg.com/us-en/ransomware-decryption-tools#legion)
Linux.Encoder decrypting tool (https://labs.bitdefender.com/2015/11/linux-ransomware-debut-fails-on-predictable-encryption-key/)
Lobzik decrypting tool (https://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
Lock Screen ransomware decrypting tool (https://esupport.trendmicro.com/en-us/home/pages/technical-support/1105975.aspx)
Locker decrypting tool (http://www.bleepingcomputer.com/forums/t/577246/locker-ransomware-support-and-help-topic/page-32#entry3721545)
Loocipher decryptor (https://www.emsisoft.com/decrypter/loocipher)
Lorenz ransomware decryptor (https://mdsassets.blob.core.windows.net/downloads/Lorenz-Decryptor.exe)
Lortok decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
MacRansom decrypting tool (https://esupport.trendmicro.com/media/13801530/Trend%20Micro%20Ransomware%20Decryptor_V1.0.1.zip)
Magniber decryptor (https://seed.kisa.or.kr/kisa/Board/56/detailView.do)
MaMoCrypt ransomware decryption tool (https://labs.bitdefender.com/2020/10/mamocrypt-ransomware-decryption-tool/)
Mapo ransomware decryptor (https://nomoreransom.cert.pl/static/mapo_decryptor.exe)
Marlboro ransom decryption tool (https://decrypter.emsisoft.com/download/marlboro)
MarsJoke decryption tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rannohdecryptor.zip)
Manamecrypt decrypting tool (a.k.a. CryptoHost) (http://www.bleepingcomputer.com/news/security/cryptohost-decrypted-locks-files-in-a-password-protected-rar-file/)
Mircop decrypting tool (http://now.avg.com/dont-pay-the-ransom-avg-releases-six-free-decryption-tools-to-retrieve-your-files/) + alternativa (https://success.trendmicro.com/portal_kb_articledetail?solutionid=1114221)
Mira ransom decryptor (https://download.f-secure.com/support/tools/Mira-decryptor/Mira%20Ransomware%20Decryptor.zip)
MegaLocker ransomware decrypting tool (https://www.emsisoft.com/decrypter/download/megalocker)
Merry Christmas / MRCR decryptor (https://decrypter.emsisoft.com/mrcr)
Mole decryptor tool (https://nomoreransom.cert.pl/static/mole_decryptor.exe)
MoneroPay Ransomware decrypting tool (https://nioguard.blogspot.com.br/2018/02/decryptor-for-moneropay-ransomware.html)
muhstik ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/muhstik)
my-Little-Ransomware decrypting tool (https://github.com/aaaddress1/my-Little-Ransomware/tree/master/decryptoTool)
Nanolocker decrypting tool (https://github.com/Cyberclues/nanolocker-decryptor)
Nemty ransomware decryptor (https://mdsassets.blob.core.windows.net/downloads/NemtyDecryptor.exe)
Nemucod decrypting tool (https://heimdalsecurity.com/blog/security-alert-malicious-script-injections-cerber-nemucod/) + alternativa (https://decrypter.emsisoft.com/nemucod)
NMoreira ransomware decryption tool (https://decrypter.emsisoft.com/download/nmoreira)
Noobcrypt decryption tool (https://files.avast.com/files/decryptor/avast_decryptor_noobcrypt.exe)
ODCODC decrypting tool (http://download.bleepingcomputer.com/BloodDolly/ODCODCDecoder.zip)
OpenToYou decryption tools (http://blog.emsisoft.com/2016/12/30/emsisoft-releases-free-decrypter-for-opentoyou-ransomware/)
Operation Global III Ransomware decrypting tool (http://www.bleepingcomputer.com/forums/t/559220/operation-global-iii-ransomware-not-only-encrypts-but-infects-your-data-as-well/)
Ouroboros ransomware decryptor (https://labs.bitdefender.com/2019/10/ouroboros-ransomware-decryption-tool/)
Ozozalocker ransomware decryptor (https://decrypter.emsisoft.com/download/ozozalocker)
Paradise ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/paradise)
PClock decrypting tool (https://decrypter.emsisoft.com/pclock)
Petya decrypting tool (http://www.thewindowsclub.com/petya-ransomware-decrypt-tool-password-generator) + alternativa (https://www.bleepingcomputer.com/news/security/author-of-original-petya-ransomware-publishes-master-decryption-key/)
PewCrypt ransom decryptor (https://decrypter.emsisoft.com/download/pewcrypt)
Philadelphia decrypting tool (https://decrypter.emsisoft.com/download/philadelphia)
PizzaCrypts decrypting tool (http://download.bleepingcomputer.com/BloodDolly/JuicyLemonDecoder.zip)
Planetary ransomware decrypting tool (https://www.bleepingcomputer.com/ransomware/decryptor/planetary-ransomware-decryptor-gets-your-files-back-for-free/)
Pletor decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
Polyglot decrypting tool (https://media.kaspersky.com/utilities/VirusUtilities/EN/rannohdecryptor.zip) (descifrado por el Rannoh Decryptor)
Pompous decrypting tool (http://www.bleepingcomputer.com/news/security/pompous-ransomware-dev-gets-defeated-by-backdoor/)
PowerWare / PoshCoder decrypting tool (https://www.helpnetsecurity.com/2016/07/22/powerware-ransomware-decrypter/)
Popcorn Ransom decrypting tool (https://www.nomoreransom.org/en/decryption-tools.html)
Professeur ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/jigsaw) (descifrado por el Jigsaw Decryptor)
PyLocky Ransomware decrypting tool (https://thehackernews.com/2019/01/pylocky-free-ransomware-decryption.html)
Radamant decrypting tool (https://decrypter.emsisoft.com/radamant)
RAGNAROK decrypting tool (https://www.emsisoft.com/ransomware-decryption-tools/download/ragnarok)
Rakhni decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip)
Rannoh decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rannohdecryptor.zip)
Ransomwared decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/ransomwared)
Rector decrypting tool (https://support.kaspersky.com/viruses/disinfection/4264)
RedRum ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/redrum)
Rotor decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el Rakhni Decryptor)
Scraper decrypting tool (https://securelist.com/a-flawed-ransomware-encryptor/69481/)
SimpleLocker ransomware decryptor (https://seed.kisa.or.kr/kisa/Board/57/detailView.do)
Simplocker ransomware decryptor (https://download.eset.com/com/eset/tools/decryptors/simplocker/latest/eset-simplocker-decryptor.apk)
Shade / Troldesh decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/ShadeDecryptor.exe) + alternativa (http://www.mcafee.com/us/downloads/free-tools/shadedecrypt.aspx)
SNSLocker decrypting tool (https://success.trendmicro.com/portal_kb_articledetail?solutionid=1114221)
SpartCrypt decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/spartcrypt)
Stampado decrypting tool (https://heimdalsecurity.com/blog/security-alert-stampado-ransomware-on-sale/) + alternativa (https://decrypter.emsisoft.com/stampado)
STOP Djvu Ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/stop-djvu)
SynAck ransom decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/synack)
Syrk ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/syrk)
SZFlocker decrypting tool (http://www.avg.com/us-en/ransomware-decryption-tools#szflocker)
Teamxrat / Xpan decryption tool (https://success.trendmicro.com/solution/1114221)
TeleCrypt decrypting tool (https://malwarebytes.app.box.com/s/kkxwgzbpwe7oh59xqfwcz97uk0q05kp3) (detalles adicionales (https://blog.malwarebytes.com/threat-analysis/2016/11/telecrypt-the-ransomware-abusing-telegram-api-defeated/))
TeslaCrypt decrypting tool (http://talosintel.com/teslacrypt_tool/) + alternativa 1 (http://www.avg.com/us-en/ransomware-decryption-tools#teslacrypt) + alternativa 2 (https://www.nomoreransom.org/decryption-tools.html)
Thanatos decryption tool (https://blog.talosintelligence.com/2018/06/ThanatosDecryptor.html)
ThunderX decryptor (https://mdsassets.blob.core.windows.net/downloads/ThunderX-Decryptor.exe)
Trustezeb.A decryptor (https://download.eset.com/com/eset/tools/decryptors/trustezeb_a/latest/esettrustezebadecoder.exe)
TurkStatic Decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/turkstatik)
TorrentLocker decrypting tool (http://www.bleepingcomputer.com/forums/t/547708/torrentlocker-ransomware-cracked-and-decrypter-has-been-made/)
Umbrecrypt decrypting tool (http://www.thewindowsclub.com/emsisoft-decrypter-hydracrypt-umbrecrypt-ransomware)
VCRYPTOR Decryptor (https://www.elevenpaths.com/downloads/vcrypt_decryptor.zip)
Wildfire decrypting tool (http://media.kaspersky.com/utilities/VirusUtilities/RU/WildfireDecryptor.zip) ++ alternativa (http://www.mcafee.com/us/downloads/free-tools/wildfiredecrypt.aspx)
WannaCry decryption tool (https://github.com/gentilkiwi/wanakiwi/releases) + Guía (https://blog.comae.io/wannacry-decrypting-files-with-wanakiwi-demo-86bafb81112d)
WannaRen decryption tool (https://labs.bitdefender.com/2020/08/wannaren-decryption-tool/)
XData Ransom decryption tool (http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip)
XORBAT decrypting tool (https://success.trendmicro.com/portal_kb_articledetail?solutionid=1114221)
XORIST decrypting tool (https://success.trendmicro.com/portal_kb_articledetail?solutionid=1114221) + alternativa (https://decrypter.emsisoft.com/xorist)
Yatron decrypting tool (https://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip) (descifrado por el the Rakhni Decryptor)
ZeroFucks decryptor (https://www.emsisoft.com/decrypter/zerofucks)
Zeta decrypting tool (https://files.avast.com/files/decryptor/avast_decryptor_cryptomix.exe) (descifrado por el CryptoMix Decryptor)
Ziggy ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/ziggy)
Zorab ransomware decryptor (https://www.emsisoft.com/ransomware-decryption-tools/download/zorab)
ZQ ransomware decryptor (https://www.emsisoft.com/decrypter/download/zq)
FAMILIAS DE RANSOMWARE FRENTE A HERRAMIENTAS DE DESCIFRADO DE RANSOMWARE
Como habrá notado, algunos de estos desencriptadores de ransomware funcionan para varias familias de ransomware, mientras que ciertas cepas tienen más de una solución (aunque esto no suele ser el caso).
Desde un punto de vista práctico, algunos de los desencriptadores son fáciles de usar, pero otros requieren algunos conocimientos técnicos. Por mucho que queramos que este proceso sea más fácil, no siempre ocurre.
Por mucho trabajo y tiempo que dediquen los investigadores a la ingeniería inversa del criptoware, lo cierto es que nunca tendremos una solución para todas estas infecciones. Haría falta un ejército de especialistas en ciberseguridad trabajando sin descanso para conseguir algo así.
CÓMO EVITAR EL RANSOMWARE EN EL FUTURO
Una de las formas más eficaces de evitar que la amenaza del ransomware cause estragos y bloquee tus datos sensibles es permanecer atento y ser proactivo.
De hecho, te recomendamos encarecidamente que apliques estos consejos descritos a continuación, como un el plan de seguridad contra el ransomware, que pueden ayudarte a prevenir este tipo de ciberataque.
Copias de seguridad sin conexión
Concienciación del personal
Filtro de spam
Bloquear los ejecutables
Bloquear los archivos JavaScript maliciosos
Restringir el uso de privilegios elevados
Parchear rápidamente el software
Confianza cero
Priorizar los activos y evaluar el tráfico
Actualizar el software antiransomware
A medida que surgen nuevos tipos de ransomware, los investigadores desencriptan algunas cepas, pero otras obtienen nuevas variantes, y puede parecer un juego del gato y el ratón, en el que la proactividad es vital. Pagar el rescate nunca garantiza que se recuperen los datos, ya que podrían acabar a la venta en la Dark Web.
Fuente: EsGeeks (https://esgeeks.com/herramientas-gratuitas-descifrar-ransomware/)