Processed through Paypal
No account required.

Donate Bitcoin to this wallet:
Donate Ethereum to this wallet:
Donate Litecoin to this wallet:
​​Facebook​​Follow @GeekOnTheLoose


 Home » Freeware Downloads » Anti-Virus, Anti-Spyware and Anti-Malware Utilities » Kaspersky RakhniDecryptor    
File - Download Kaspersky RakhniDecryptor

Always scroll to the bottom of the page to download files on
We don't believe in fake/misleading download buttons and tricks.

Kaspersky RakhniDecryptor
RakhniDecryptor utility for removing Trojan-Ransom.Win32.Rakhni malicious software (.oshit and others)

The malicious programs Trojan-Ransom.Win32.Rakhni, Trojan-Ransom.Win32.Agent.iih, Trojan-Ransom.Win32.Aura, Trojan-Ransom.Win32.Autoit, and Trojan-Ransom.AndroidOS.Pletor are used by malefactors to encrypt files so that their extensions are changed as follows:


For example:

Before: file.doc / After: file.doc.locked

Before: 1.doc / After: 1.dochb15

To regain control over the files encrypted by Trojan-Ransom.Win32.Rakhni, Trojan-Ransom.Win32.Aura, Trojan-Ransom.Win32.Agent.iih, Trojan-Ransom.Win32.Autoit, and Trojan-Ransom.AndroidOS.Pletor, use the RakhniDecryptor utility developed by Kaspersky Lab specialists.

1. How to work with the utility

IMPORTANT: Trojan-Ransom.Win32.Rakhni creates the exit.hhr.oshit file that contains an encrypted password to user's files. If this file remains on the computer, it will make decryption with the RakhniDecryptor utility faster. If the file has been removed, it can be recovered with file recovery utilities. After the file is recovered, put it into %APPDATA% and run the scan with the utility once again. The exit.hhr.oshit file has the following path:

Windows XP: C:\Documents and Settings\<username>\Application Data
Windows 7/8: C:\Users\<username>\AppData\Roaming

To decrypt the files, do the following:

Download the RakhniDecryptor.exe file. The instructions on how to download a file are available below:
For Windows 8 users
For Windows 7 users
For Windows Vista users
Run the RakhniDecryptor.exe file on the infected computer.
In the Kaspersky RakhniDecryptor window click the Change parameters link.
In the Settings window select the objects to scan (hard drives / removable drives / network drives).
Select the checkbox Delete crypted files after decryption (the utility will be deleting copies of original files with the .locked, .kraken and .darkness extensions).
Click ОК.
In the Kaspersky RakhniDecryptor, click the Start scan button.
In the Specify the path to one of encrypted files, select the file you need to restore and click Open.
The utility will start recovering the password. Please mind the Warning! window message.
Wait until the utility is done with decrypting the file (do not exit the program or shut down the computer).

2. Parameters for running the utility from the command prompt

To start the utility for multi-thread password cracking, use the command –threads
For example: RakhniDecryptor.exe –threads 6
The utility starts a 6-thread bruteforce. If the parameter is not specified, the number of threads corresponds to the number of cores.
To restart password cracking from a certain value: –start <number>. To stop password cracking at a certain value: –end <number>.

The lowest value is 0, the highest value is 1000000.

All information about the password cracking process is saved to the report (C:\RakhniDecryptor.<version>_<date>_<creation_time>_log.txt).
For example:
RakhniDecryptor.exe –start 123 – range [123, 1000000]
RakhniDecryptor.exe –start 100 –end 50000 – range [100, 50000]
RakhniDecryptor.exe –end 7000 – range [0, 7000]
RakhniDecryptor.exe – full range [0, 1000000]

Downloads Views Developer Last Update Version Size Type Rank
3,689 5,470 Kaspersky Lab <img src=""border="0"> Sep 29, 2017 - 11:12 1.54MB EXE 5/5, out of 1 Votes.
File Tags
Kaspersky  RakhniDecryptor  
Download Time
56Kbit Modem:  3m 51s  · 256Kbit:  51s  · 1Mbit:  13s  · 5Mbit:  3s

Please read before downloading below.

This website has no fake download buttons, ads, malware, spyware or scams.
It was created from our little computer store in the Missouri Ozarks.
The way we keep it going is everyone chips-in a little in donations to
help pay the operating costs. If you use the site, please leave a donation.
Thanks! -Randy and Deanna (The Older Geeks)

Please help make these numbers the same by month's end.
Monthly operating costs = $480
Donations for January = $133
Extra donations go towards updating our server.
Processed securely through Paypal.
No PayPal account required.

Donate Bitcoin to this wallet address:

Donate Ethereum to this wallet address:

Donate Litecoin to this wallet address:

Recent Super Donors ($50+)
Thanks, Richard!
Thanks, Nick!
Thanks, Kathy!

Recent Donors
Thanks, Cindy
Thanks, Joseph
Thanks, Albordine
Thanks, Cindy
Thanks, Le Kelvin
Thanks, Tamara
Thanks, Barry
Thanks, Terry

→→ Download Now ←← - Rate File - More From This Developer - - Images

Search - Statistics & RSS - Contact Admin - -
PHCDownload 1.1.2 - Copyright (c) 2005 - 2018 - 0.0091 seconds