Processed through Paypal
No account required.

Donate Bitcoin to this wallet:
Donate Ethereum to this wallet:
Donate Litecoin to this wallet:
Facebook Follow @GeekOnTheLoose


 Home » Freeware Downloads » Anti-Virus, Anti-Malware, Security Utilities » Kaspersky RakhniDecryptor    
File - Download Kaspersky RakhniDecryptor

Always scroll to the bottom of the page to download files on
We don't believe in fake/misleading download buttons and tricks.

Kaspersky RakhniDecryptor
RakhniDecryptor utility for removing Trojan-Ransom.Win32.Rakhni malicious software (.oshit and others)

The malicious programs Trojan-Ransom.Win32.Rakhni, Trojan-Ransom.Win32.Agent.iih, Trojan-Ransom.Win32.Aura, Trojan-Ransom.Win32.Autoit, and Trojan-Ransom.AndroidOS.Pletor are used by malefactors to encrypt files so that their extensions are changed as follows:


For example:

Before: file.doc / After: file.doc.locked

Before: 1.doc / After: 1.dochb15

To regain control over the files encrypted by Trojan-Ransom.Win32.Rakhni, Trojan-Ransom.Win32.Aura, Trojan-Ransom.Win32.Agent.iih, Trojan-Ransom.Win32.Autoit, and Trojan-Ransom.AndroidOS.Pletor, use the RakhniDecryptor utility developed by Kaspersky Lab specialists.

1. How to work with the utility

IMPORTANT: Trojan-Ransom.Win32.Rakhni creates the exit.hhr.oshit file that contains an encrypted password to user's files. If this file remains on the computer, it will make decryption with the RakhniDecryptor utility faster. If the file has been removed, it can be recovered with file recovery utilities. After the file is recovered, put it into %APPDATA% and run the scan with the utility once again. The exit.hhr.oshit file has the following path:

Windows XP: C:\Documents and Settings\<username>\Application Data
Windows 7/8: C:\Users\<username>\AppData\Roaming

To decrypt the files, do the following:

Download the RakhniDecryptor.exe file. The instructions on how to download a file are available below:
For Windows 8 users
For Windows 7 users
For Windows Vista users
Run the RakhniDecryptor.exe file on the infected computer.
In the Kaspersky RakhniDecryptor window click the Change parameters link.
In the Settings window select the objects to scan (hard drives / removable drives / network drives).
Select the checkbox Delete crypted files after decryption (the utility will be deleting copies of original files with the .locked, .kraken and .darkness extensions).
Click ОК.
In the Kaspersky RakhniDecryptor, click the Start scan button.
In the Specify the path to one of encrypted files, select the file you need to restore and click Open.
The utility will start recovering the password. Please mind the Warning! window message.
Wait until the utility is done with decrypting the file (do not exit the program or shut down the computer).

2. Parameters for running the utility from the command prompt

To start the utility for multi-thread password cracking, use the command –threads
For example: RakhniDecryptor.exe –threads 6
The utility starts a 6-thread bruteforce. If the parameter is not specified, the number of threads corresponds to the number of cores.
To restart password cracking from a certain value: –start <number>. To stop password cracking at a certain value: –end <number>.

The lowest value is 0, the highest value is 1000000.

All information about the password cracking process is saved to the report (C:\RakhniDecryptor.<version>_<date>_<creation_time>_log.txt).
For example:
RakhniDecryptor.exe –start 123 – range [123, 1000000]
RakhniDecryptor.exe –start 100 –end 50000 – range [100, 50000]
RakhniDecryptor.exe –end 7000 – range [0, 7000]
RakhniDecryptor.exe – full range [0, 1000000]

Downloads Views Developer Last Update Version Size Type Rank
4,221 6,739 Kaspersky Lab <img src=""border="0"> Sep 29, 2017 - 11:12 1.54MB EXE 5/5, out of 6 Votes.
File Tags
Kaspersky  RakhniDecryptor  
Download Time
56Kbit Modem:  3m 51s  · 256Kbit:  51s  · 1Mbit:  13s  · 5Mbit:  3s

Whoa there, Speedy! Your download is below
but you gotta read this first:

Like seeing no ads? No scammy, fake download buttons?
Wondering who's paying for the bandwidth? Well, we're
depending on you. This site operates on the honor system.
If your momma raised you to be honorable, you get to go
nuts downloading all you want after you make a donation.
This is how the site stays alive. Everyone hates ads. YUCK!
No one is stopping you from downloading without donating,
no one except your momma.
Thank you! -Randy & Deanna (The Older Geeks)

Monthly operating costs = $480
Donations for October = $237
Processed securely through Paypal.
No PayPal account required.

Donate Bitcoin:

Donate Ethereum:

Donate Litecoin:

Recent Super Donors ($50+)
Thanks, Bruce
Thanks, Travis
Thanks, Goodlife Assisted Living!

Recent Donors
Thanks, Neil
Thanks, William
Thanks, Brian
Thanks, Master-Tech Repair Service
Thanks, Graham
Thanks, Frank
Thanks, Tommie
Thanks, Paul

→→ Download Now ←← - Click to Rate File -
Like? Share this page on Twitter →

PHCDownload 1.1.2 - Copyright (c) 2005 - 2018 - 0.0225 seconds