Processed through Paypal
No account required.

Donate Bitcoin to this wallet:
Donate Ethereum to this wallet:
Donate Litecoin to this wallet:
​​Facebook​​Follow @GeekOnTheLoose


 Home » Freeware Downloads » Anti-Virus, Anti-Spyware and Anti-Malware Utilities » Kaspersky RakhniDecryptor    
File - Download Kaspersky RakhniDecryptor

Always scroll to the bottom of the page to download files on
We don't believe in fake/misleading download buttons and tricks.

Kaspersky RakhniDecryptor
RakhniDecryptor utility for removing Trojan-Ransom.Win32.Rakhni malicious software (.oshit and others)

The malicious programs Trojan-Ransom.Win32.Rakhni, Trojan-Ransom.Win32.Agent.iih, Trojan-Ransom.Win32.Aura, Trojan-Ransom.Win32.Autoit, and Trojan-Ransom.AndroidOS.Pletor are used by malefactors to encrypt files so that their extensions are changed as follows:


For example:

Before: file.doc / After: file.doc.locked

Before: 1.doc / After: 1.dochb15

To regain control over the files encrypted by Trojan-Ransom.Win32.Rakhni, Trojan-Ransom.Win32.Aura, Trojan-Ransom.Win32.Agent.iih, Trojan-Ransom.Win32.Autoit, and Trojan-Ransom.AndroidOS.Pletor, use the RakhniDecryptor utility developed by Kaspersky Lab specialists.

1. How to work with the utility

IMPORTANT: Trojan-Ransom.Win32.Rakhni creates the exit.hhr.oshit file that contains an encrypted password to user's files. If this file remains on the computer, it will make decryption with the RakhniDecryptor utility faster. If the file has been removed, it can be recovered with file recovery utilities. After the file is recovered, put it into %APPDATA% and run the scan with the utility once again. The exit.hhr.oshit file has the following path:

Windows XP: C:\Documents and Settings\<username>\Application Data
Windows 7/8: C:\Users\<username>\AppData\Roaming

To decrypt the files, do the following:

Download the RakhniDecryptor.exe file. The instructions on how to download a file are available below:
For Windows 8 users
For Windows 7 users
For Windows Vista users
Run the RakhniDecryptor.exe file on the infected computer.
In the Kaspersky RakhniDecryptor window click the Change parameters link.
In the Settings window select the objects to scan (hard drives / removable drives / network drives).
Select the checkbox Delete crypted files after decryption (the utility will be deleting copies of original files with the .locked, .kraken and .darkness extensions).
Click ОК.
In the Kaspersky RakhniDecryptor, click the Start scan button.
In the Specify the path to one of encrypted files, select the file you need to restore and click Open.
The utility will start recovering the password. Please mind the Warning! window message.
Wait until the utility is done with decrypting the file (do not exit the program or shut down the computer).

2. Parameters for running the utility from the command prompt

To start the utility for multi-thread password cracking, use the command –threads
For example: RakhniDecryptor.exe –threads 6
The utility starts a 6-thread bruteforce. If the parameter is not specified, the number of threads corresponds to the number of cores.
To restart password cracking from a certain value: –start <number>. To stop password cracking at a certain value: –end <number>.

The lowest value is 0, the highest value is 1000000.

All information about the password cracking process is saved to the report (C:\RakhniDecryptor.<version>_<date>_<creation_time>_log.txt).
For example:
RakhniDecryptor.exe –start 123 – range [123, 1000000]
RakhniDecryptor.exe –start 100 –end 50000 – range [100, 50000]
RakhniDecryptor.exe –end 7000 – range [0, 7000]
RakhniDecryptor.exe – full range [0, 1000000]

Downloads Views Developer Last Update Version Size Type Rank
3,848 5,875 Kaspersky Lab <img src=""border="0"> Sep 29, 2017 - 11:12 1.54MB EXE 5/5, out of 1 Votes.
File Tags
Kaspersky  RakhniDecryptor  
Download Time
56Kbit Modem:  3m 51s  · 256Kbit:  51s  · 1Mbit:  13s  · 5Mbit:  3s

The download button is below...
but we need you to read this first:
This website is 100% crowdfunded. Not funded by tricking you into clicking on fake
download buttons that download something else. Not funded by putting adware on your
computer. Not funded by making you watch ads while your download takes forever to start.
If you like this concept, please help pay for the operating costs with a small (or big :))
donation and we'll keep cranking out the freeware.
Thanks! -Randy and Deanna (The Older Geeks) Missouri, USA

Please help make these numbers the same by month's end.
Monthly operating costs = $480
Donations for April = $236
Extra donations go towards updating our server.
Processed securely through Paypal.
No PayPal account required.

Donate Bitcoin to this wallet address:

Donate Ethereum to this wallet address:

Donate Litecoin to this wallet address:

Recent Super Donors ($50+)
Thanks, Robert!
Thanks, DrChip Computer Services!
Thanks, Gregory!

Recent Donors
Thanks, Eileen
Thanks, John
Thanks, Litecoin donor
Thanks, Joseph
Thanks, Aaron
Thanks, Nixia
Thanks, John
Thanks, Bitcoin Donor

→→ Download Now ←← - Rate File - More From This Developer - - Images

Search - Statistics & RSS - Contact Admin - -
PHCDownload 1.1.2 - Copyright (c) 2005 - 2018 - 0.0058 seconds