Processed through Paypal
No account required.

Donate Bitcoin to this wallet:
Donate Ethereum to this wallet:
Donate Litecoin to this wallet:
​​Facebook​​Follow @GeekOnTheLoose


 Home » Freeware Downloads » Anti-Virus, Anti-Spyware and Anti-Malware Utilities » Kaspersky RakhniDecryptor    
File - Download Kaspersky RakhniDecryptor

Always scroll to the bottom of the page to download files on
We don't believe in fake/misleading download buttons and tricks.

Kaspersky RakhniDecryptor
RakhniDecryptor utility for removing Trojan-Ransom.Win32.Rakhni malicious software (.oshit and others)

The malicious programs Trojan-Ransom.Win32.Rakhni, Trojan-Ransom.Win32.Agent.iih, Trojan-Ransom.Win32.Aura, Trojan-Ransom.Win32.Autoit, and Trojan-Ransom.AndroidOS.Pletor are used by malefactors to encrypt files so that their extensions are changed as follows:


For example:

Before: file.doc / After: file.doc.locked

Before: 1.doc / After: 1.dochb15

To regain control over the files encrypted by Trojan-Ransom.Win32.Rakhni, Trojan-Ransom.Win32.Aura, Trojan-Ransom.Win32.Agent.iih, Trojan-Ransom.Win32.Autoit, and Trojan-Ransom.AndroidOS.Pletor, use the RakhniDecryptor utility developed by Kaspersky Lab specialists.

1. How to work with the utility

IMPORTANT: Trojan-Ransom.Win32.Rakhni creates the exit.hhr.oshit file that contains an encrypted password to user's files. If this file remains on the computer, it will make decryption with the RakhniDecryptor utility faster. If the file has been removed, it can be recovered with file recovery utilities. After the file is recovered, put it into %APPDATA% and run the scan with the utility once again. The exit.hhr.oshit file has the following path:

Windows XP: C:\Documents and Settings\<username>\Application Data
Windows 7/8: C:\Users\<username>\AppData\Roaming

To decrypt the files, do the following:

Download the RakhniDecryptor.exe file. The instructions on how to download a file are available below:
For Windows 8 users
For Windows 7 users
For Windows Vista users
Run the RakhniDecryptor.exe file on the infected computer.
In the Kaspersky RakhniDecryptor window click the Change parameters link.
In the Settings window select the objects to scan (hard drives / removable drives / network drives).
Select the checkbox Delete crypted files after decryption (the utility will be deleting copies of original files with the .locked, .kraken and .darkness extensions).
Click ОК.
In the Kaspersky RakhniDecryptor, click the Start scan button.
In the Specify the path to one of encrypted files, select the file you need to restore and click Open.
The utility will start recovering the password. Please mind the Warning! window message.
Wait until the utility is done with decrypting the file (do not exit the program or shut down the computer).

2. Parameters for running the utility from the command prompt

To start the utility for multi-thread password cracking, use the command –threads
For example: RakhniDecryptor.exe –threads 6
The utility starts a 6-thread bruteforce. If the parameter is not specified, the number of threads corresponds to the number of cores.
To restart password cracking from a certain value: –start <number>. To stop password cracking at a certain value: –end <number>.

The lowest value is 0, the highest value is 1000000.

All information about the password cracking process is saved to the report (C:\RakhniDecryptor.<version>_<date>_<creation_time>_log.txt).
For example:
RakhniDecryptor.exe –start 123 – range [123, 1000000]
RakhniDecryptor.exe –start 100 –end 50000 – range [100, 50000]
RakhniDecryptor.exe –end 7000 – range [0, 7000]
RakhniDecryptor.exe – full range [0, 1000000]

Downloads Views Developer Last Update Version Size Type Rank
4,036 6,324 Kaspersky Lab <img src=""border="0"> Sep 29, 2017 - 11:12 1.54MB EXE 5/5, out of 1 Votes.
File Tags
Kaspersky  RakhniDecryptor  
Download Time
56Kbit Modem:  3m 51s  · 256Kbit:  51s  · 1Mbit:  13s  · 5Mbit:  3s

The download button is below...
but we need you to read this first:
This website is 100% donation funded and ad-free. Not funded by tricking you into
clicking on fake download buttons that download affiliate junkware. Not funded by
putting affiliate adware on your computer. Not funded by making you watch ads while
your download takes forever to start.
How can we afford to run the site without this stuff? Simple... we can't.
If you appreciate our efforts and the site, please help us pay for the operating costs
with a donation and we'll keep diggin' up the freeware.
Thanks! -Randy and Deanna (The Older Geeks) Missouri, USA

Please help make these numbers the same by month's end.
Monthly operating costs = $480
Donations for July = $60
Extra donations go towards updating our server.
Processed securely through Paypal.
No PayPal account required.

Donate Bitcoin to this wallet address:

Donate Ethereum to this wallet address:

Donate Litecoin to this wallet address:

Recent Super Donors ($50+)
Thanks, Levi!
Thanks, Kay!
Thanks, Alan!

Recent Donors
Thanks, Virusbusters Co.
Thanks, Hackers Unlimited
Thanks, Ronald
Thanks, James
Thanks, William
Thanks, David
Thanks, Ronald
Thanks, Joseph

→→ Download Now ←← - Rate File - More From This Developer - - Images

Search - Statistics & RSS - Contact Admin - -
PHCDownload 1.1.2 - Copyright (c) 2005 - 2018 - 0.006 seconds