Find if a decryption tool exists for the ransomware that hit you. Search by family name, or upload samples to external identification services.
Upload a ransom note or encrypted file sample to identify the ransomware strain. Run by MalwareHunterTeam.
Open ID Ransomware (opens in new tab) →Europol-led initiative with 180+ free decryption tools. Check if your ransomware has a known decryptor.
Browse Decryptors (opens in new tab) →Disconnect infected systems from the network immediately.
Do NOT delete encrypted files or ransom notes — they help with identification.
Use ID Ransomware above to determine the strain.
File a report with CISA (US), Action Fraud (UK), or local CERT.
Search below for a free decryption tool before considering payment.
Contact incident response specialists or your national CERT team.
Sourced from NoMoreRansom.org — all download links point to original provider sources.
MafiaWare666 Decryptor