Find if a decryption tool exists for the ransomware that hit you. Search by family name, or upload samples to external identification services.
Upload a ransom note or encrypted file sample to identify the ransomware strain. Run by MalwareHunterTeam.
Open ID Ransomware (opens in new tab) →Europol-led initiative with 180+ free decryption tools. Check if your ransomware has a known decryptor.
Browse Decryptors (opens in new tab) →Disconnect infected systems from the network immediately.
Do NOT delete encrypted files or ransom notes — they help with identification.
Use ID Ransomware above to determine the strain.
File a report with CISA (US), Action Fraud (UK), or local CERT.
Search below for a free decryption tool before considering payment.
Contact incident response specialists or your national CERT team.
Sourced from NoMoreRansom.org — all download links point to original provider sources.
Jigsaw Decryptor
Jigsaw Decryptor
JS WORM 2.0 Decryptor
JSWorm 4.0 Decryptor
Rakhni Decryptor
JavaLocker Decryptor
Jigsaw Decryptor
Trend Micro Ransomware Decryptor
StupidDecryptor Decryptor
Jigsaw Decryptor
Judge Decryptor
Lockbit 3.0 Decryptor
Rannoh Decryptor
Phobos Decryptor
Jigsaw Decryptor
djvu Decryptor