Free recovery tools

Version 5.0.0.92320
Kaspersky Anti-Ransomware Tool

Protects devices against WannaCry, Petya, Bad Rabbit, Locky, TeslaCrypt, Rakhni, Rannoh ransomware.

Version 20.0.6.0
Kaspersky Virus Removal Tool 2020

Performs a comprehensive scan and disinfects devices running Windows 7 and later, as well as servers running Windows Server 2008 (R2 SP 1) and later.


Review the system requirements, to see if this tool is compatible with your device.


For instructions on how to use the tool, see Knowledge Base.

Performs a comprehensive scan and disinfects devices running Windows 7 and later, as well as servers running Windows Server 2008 (R2 SP 1) and later.

Kaspersky Internet Security

To avoid infections in the future, try Kaspersky Internet Security. Get award-winning antivirus plus a range of tools built to guard your private life and identity. Kaspersky Internet Security also includes:

  • Protection of online payments and transactions
  • Ad block and protection against data collection in a browser
  • VPN with up to 300 MB of traffic per day

To avoid infections in the future, try Kaspersky Internet Security.

Version 15.0.26.0
Kaspersky Virus Removal Tool 2015

Performs a comprehensive scan and disinfects computers with operating systems such as Windows XP, Vista and 7, as well as Windows Server 2003 and 2008.


Review the system requirements to see if the tool is compatible with your device.


For instructions on how to use the tool, see Knowledge Base.

Performs a comprehensive scan and disinfects computers with operating systems such as Windows XP, Vista and 7, as well as Windows Server 2003 and 2008.

Version 18.0.11.0
Kaspersky Rescue Disk

Detects and removes malware that blocks Windows operating system.


For instructions on how to use the tool, see Knowledge Base.

Detects and removes malware that blocks Windows operating system.

Version 1.0.0.4
WildfireDecryptor

Decrypts files with the wflx extension encrypted by Wildfire Locker malware.


For instructions on how to use the tool, see this article.

Decrypts files with the wflx extension encrypted by Wildfire Locker malware.

Version 3.1.0.28
TDSSKiller

Eliminates Rootkit.Win32.TDSS malware, rootkits and bootkits.


For instructions on how to use the tool, see this article.

Eliminates Rootkit.Win32.TDSS malware, rootkits and bootkits.

Version 2.7.0.2
RectorDecryptor

Decrypts files with jpg, doc, pdf and rar extensions affected by Trojan‑Ransom.Win32.Rector malware.


For instructions on how to use the tool, see this article.

Decrypts files with jpg, doc, pdf and rar extensions encrypted by Trojan‑Ransom.Win32.Rector malware.

Version 1.32.0.0
RakhniDecryptor

Decrypts files with extensions such as locked, kraken, darkness, etc. encrypted by Trojan‑Ransom.Win32.Rakhni malware.


For instructions on how to use the tool, see this article.

Decrypts files with extensions such as locked, kraken, darkness, etc. encrypted by Trojan‑Ransom.Win32.Rakhni malware.

Version 1.18.5.0
RannohDecryptor

Decrypts files affected by Trojan-Ransom.Win32.Rannoh malware.


For instructions on how to use the tool, see this article.

Decrypts files affected by Trojan-Ransom.Win32.Rannoh malware.

Version 1.0.0.4
ScraperDecryptor

Decrypts files encrypted by Trojan‑Ransom.Win32.Scraper (TorLocker) malware.


For instructions on how to use the tool, see this article.

Decrypts files encrypted by Trojan‑Ransom.Win32.Scraper (TorLocker) malware.

Version 2.0.1.5
ScatterDecryptor

Decrypts files with crypt, pzdc and good extensions encrypted by Ransom.Win32.Scatter and Trojan‑Ransom.BAT.Scatter malware.


For instructions on how to use the tool, see this article.

Decrypts files with crypt, pzdc and good extensions encrypted by Ransom.Win32.Scatter and Trojan‑Ransom.BAT.Scatter malware.

Version 1.2.0.0
ShadeDecryptor

Decrypts files with extensions xtbl, breaking_bad, ytbl etc. encrypted by Trojan‑Ransom.Win32.Shade malware.


For instructions on how to use the tool, see this article.

Decrypts files with extensions xtbl, breaking_bad, ytbl etc. encrypted by Trojan‑Ransom.Win32.Shade malware.

Version 2.5.4.3
XoristDecryptor

Eliminates Trojan‑Ransom.Win32.Xorist and Trojan‑Ransom.MSIL.Vandev malware that make unauthorized changes to the data on the computer.


For instructions on how to use the tool, see this article.

Eliminates Trojan‑Ransom.Win32.Xorist and Trojan‑Ransom.MSIL.Vandev malware that make unauthorized changes to the data on the computer.

Version 1.0.0.6
CoinVaultDecryptor

Decrypts files affected by malware of the Trojan-Ransom.MSIL.CoinVault family.


For instructions on how to use the tool, see this article.

Decrypts files affected by malware of the Trojan-Ransom.MSIL.CoinVault family.