Being towards death

废话少说，直接上干货

01 勒索软件解密工具#

✎[Apocalypse 勒索软件解密工具]

https://www.pcrisk.com/removal-guides/10111-apocalypse-ransomware

✎[Alcatrazlocker 勒索软件解密工具]

https://files.avast.com/files/decryptor/avast_decryptor_alcatrazlocker.exe

✎[Alma 勒索软件解密工具]

https://info.phishlabs.com/blog/alma-ransomware-analysis-of-a-new-ransomware-threat-and-a-decrypter

✎[Alpha 勒索软件解密工具]

https://dl.360safe.com/Decryptor_AlphaDecrypter.cab

✎[AL-Namrood 勒索软件解密工具]

https://www.pcrisk.com/removal-guides/10535-al-namrood-ransomware

✎[Apocalypse 勒索病毒解密工具]

http://blog.emsisoft.com/2016/06/29/apocalypse-ransomware-which-targets-companies-through-insecure-rdp/

✎[Autolocky 勒索软件解密工具]

https://www.bleepingcomputer.com/news/security/decrypted-the-new-autolocky-ransomware-fails-to-impersonate-locky/

✎[Bart 勒索病毒解密工具]

http://phishme.com/rockloader-downloading-new-ransomware-bart/

✎[BitDtak 勒索软件解密工具]

https://download.bleepingcomputer.com/demonslay335/BitStakDecrypter.zip

✎[BarRax 勒索软件解密工具]

https://blog.checkpoint.com/wp-content/uploads/2017/03/BarRaxDecryptor.zip

✎[CryptON 勒索病毒解密工具]

http://blog.emsisoft.com/2017/03/07/emsisoft-releases-free-decrypter-for-crypton-ransomware/

✎[CoinVault 勒索软件解密工具]

https://www.bleepingcomputer.com/virus-removal/coinvault-ransomware-information

✎[CryptXXX 勒索病毒解密工具]

http://www.bleepingcomputer.com/virus-removal/cryptxxx-ransomware-help-information

✎[Crypt0 勒索软件解密工具]

https://download.bleepingcomputer.com/demonslay335/Crypt0Decrypter.zip

https://www.pcrisk.com/removal-guides/10478-crypt0-ransomware

✎[Crypt38Keygen 勒索软件解密工具]

https://download.bleepingcomputer.com/demonslay335/Crypt38Keygen.zip

✎[Crypren 勒索软件解密工具]

http://www.nyxbone.com/malware/Crypren.html

✎[CryptComsole 勒索软件解密工具]

https://download.bleepingcomputer.com/demonslay335/CryptConsoleDecrypter.zip

✎[Crytomix 勒索软件解密工具]

https://files.avast.com/files/decryptor/avast_decryptor_cryptomix.exe

✎[CryptoHostKeygen 勒索软件解密工具]

✎[Cry9 勒索软件解密工具]

https://www.pcrisk.com/removal-guides/11199-cry9-ransomware

http://blog.emsisoft.com/2017/04/04/remove-cry9-ransomware-with-emsisofts-free-decrypter/

✎[CoinVault 勒索软件解密工具]

https://www.nomoreransom.org/uploads/CoinVaultDecryptor.zip

✎[Cryptinfinite 勒索软件解密工具]

https://www.pcrisk.com/removal-guides/9568-cryptinfinite-ransomware

✎[CrazyCrypt 勒索密钥生成工具]

https://edr.sangfor.com.cn/file/tool/CrazyCrypt_Password.rar

✎[DXXD 勒索病毒解密工具]

http://www.bleepingcomputer.com/news/security/the-week-in-ransomware-october-14-2016-exotic-lockydump-comrade-and-more/

✎[DoNotOpen 勒索软件解密工具]

https://download.bleepingcomputer.com/demonslay335/DoNotOpenDecrypter.zip

✎[Decrypt Protect [mbl advisory] 勒索病毒解密工具]

http://www.malwareremovalguides.info/decrypt-files-with-decrypt_mblblock-exe-decrypt-protect/

✎[Enigma 勒索软件解密工具]

https://www.im-infected.com/ransomware/remove-enigma-ransomware-virus-removal.html

✎[EduCrypt 勒索软件解密工具]

https://www.bleepingcomputer.com/news/security/the-educrypt-ransomware-tries-to-teach-you-a-lesson/

✎[GhostCrypt 勒索病毒解密工具]

http://www.bleepingcomputer.com/forums/t/614197/ghostcrypt-z81928819-help-support-topic-read-this-filetxt/

✎[GhostCrypt 勒索软件解密工具]

https://download.bleepingcomputer.com/demonslay335/GhostCryptDecrypter.zip

✎[Gomasom 勒索软件解密工具]

https://www.bleepingcomputer.com/news/security/gomasom-crypt-ransomware-decrypted/

✎[GandCrab 勒索软件解密工具]

https://www.bleepingcomputer.com/news/security/fbi-releases-master-decryption-keys-for-gandcrab-ransomware/

✎[Hidden tear 勒索软件解密工具]

https://files.avast.com/files/decryptor/avast_decryptor_hiddentear.exe

https://download.bleepingcomputer.com/demonslay335/hidden-tear-decrypter.zip

✎[HydraCrypt/UmbreCrypt 勒索病毒解密工具]

http://blog.emsisoft.com/2016/02/12/decrypter-for-hydracrypt-and-umbrecrypt-available/

✎[HydraCrypt 勒索软件解密工具]

https://tmp.emsisoft.com/fw/decrypt_hydracrypt.exe

✎[Hidden Tear 勒索软件解密工具]

https://www.cyber.nj.gov/threat-profiles/ransomware-variants/hidden-tear

✎[InsaneCrypt 勒索软件解密工具]

https://download.bleepingcomputer.com/demonslay335/InsaneCryptDecrypter.zip

✎[Ims00rry 勒索软件解密工具]

https://securityaffairs.co/wordpress/88376/malware/ims00rry-ransomware-decryptor.html

https://www.emsisoft.com/decrypter/ims00rry

✎[Jigsaw 勒索软件解密工具]

https://www.bleepingcomputer.com/news/security/jigsaw-ransomware-becomes-cryptohitman-with-porno-extension/

✎[JuicyLemon 勒索软件解密工具]

https://dl.360safe.com/Decryptor_JuicyLemonDecoder.cab

✎[JigSaw 勒索软件解密工具]

https://download.bleepingcomputer.com/demonslay335/JigSawDecrypter.zip

✎[Lockcrypt 勒索软件解密工具]

https://labs.bitdefender.com/wp-content/uploads/downloads/lockcrypt-ransomware-decryptor/

✎[Legion 勒索病毒解密工具]

http://botcrawl.com/legion-ransomware/

✎[LockedIn 勒索软件解密工具]

https://download.bleepingcomputer.com/demonslay335/LockedInDecrypter.zip

✎[MirCop 勒索软件解密工具]

https://download.bleepingcomputer.com/demonslay335/MirCopDecrypter.zip

✎[Mblblock 勒索软件解密工具]

https://tmp.emsisoft.com/fw/decrypt_mblblock.exe

✎[Marlboro 勒索软件解密工具]

https://www.bleepingcomputer.com/news/security/marlboro-ransomware-defeated-in-one-day/

✎[Nullbyte 勒索软件解密工具]

https://www.bleepingcomputer.com/news/security/the-nullbyte-ransomware-pretends-to-be-the-necrobot-pokemon-go-application/

✎[NullByte 勒索软件解密工具]

https://download.bleepingcomputer.com/demonslay335/NullByteDecrypter.zip

✎[Nanolocker 勒索软件解密工具]

✎[NMoreira 勒索软件解密工具]

https://www.pcrisk.com/removal-guides/10689-nmoreira-ransomware

✎[NanoLocker 勒索病毒解密工具]

http://blog.malwareclipboard.com/2016/01/nanolocker-ransomware-analysis.html

✎[OpenToYou 勒索病毒解密工具]

http://blog.emsisoft.com/2016/12/30/emsisoft-releases-free-decrypter-for-opentoyou-ransomware/

✎[Odcodc 勒索病毒解密工具]

http://www.nyxbone.com/malware/odcodc.html

✎[ODCODCDecoder 勒索软件解密工具]

https://dl.360safe.com/Decryptor_ODCODCDecoder.cab

✎[Pclock 勒索软件解密工具]

https://www.bleepingcomputer.com/forums/t/561970/new-pclock-cryptolocker-ransomware-discovered/

✎[PopCorn 勒索软件解密工具]

https://www.elevenpaths.com/downloads/RecoverPopCorn.zip

✎[Ransom.Cryakl 勒索病毒解密工具]

http://blog.checkpoint.com/2015/11/04/offline-ransomware-encrypts-your-data-without-cc-communication/

✎[Shade 勒索软件解密工具]

https://blog.kaspersky.com/shade-decryptor/12661/

✎[SanSam 勒索软件解密工具]

https://download.bleepingcomputer.com/demonslay335/SamSamStringDecrypter.zip

✎[Unlock92 勒索软件解密工具]

https://download.bleepingcomputer.com/demonslay335/Unlock92Decrypter.zip

✎[Unlocker 勒索软件解密工具]

✎[Wildfire 勒索软件解密工具]

https://downloadcenter.mcafee.com/products/mcafee-avert/wildfiredecrypt/wildfiredecrypt.exe

02 综合性解密工具网站#

✎卡巴斯基：勒索软件解密工具集

https://noransom.kaspersky.com/?spm=a2c4g.11186623.2.3.bSlRlm

✎Avast：勒索软件解密工具集

https://www.avast.com/zh-cn/ransomware-decryption-tools?spm=a2c4g.11186623.2.5.bSlRlm

✎Trendmicro：勒索软件解密方案

https://esupport.trendmicro.com/solution/zh-cn/1115118.aspx?spm=a2c4g.11186623.2.4.bSlRlm

✎MalwareHunterTeam: 勒索软件解密工具集

https://id-ransomware.malwarehunterteam.com/

✎nomoreransom：勒索软件解密工具集

https://www.nomoreransom.org/zh/index.html

✎Emsisoft：勒索软件解密工具集

https://www.emsisoft.com/ransomware-decryption-tools/free-download

03 勒索信息综合性查询网站#

✎深信服 EDR 官网勒索查询界面

https://edr.sangfor.com.cn/#/information/ransom_search

✎botfrei.de 网站

https://www.botfrei.de/de/ransomware/galerie.html

04 注意事项#

使用解密工具您需要注意以下事项：

1、通过勒索信息文件、加密后文件后缀等勒索特征判断勒索病毒家族。深信服 EDR 官网提供勒索病毒搜索功能，支持勒索病毒家族名或加密后缀查询，快速找到相关信息。

搜索链接：https://edr.sangfor.com.cn

2、选择对应家族（如有版本也应选择对应版本）的解密工具；

3、解密前需对重要的数据进行备份（即使处于被加密状态），以防止解密失败造成损失；

4、解密前需确保系统中的勒索病毒已被清除，否则可能遭到重复加密；

5、部分解密工具可能需要特定的解密环境（如在原始受感染的主机上进行解密、需要同时提供加密文件和原文件等），具体情况参考工具中的说明；

6、解密工具可能只对某些家族的特定变种或版本生效。