Your download link is at the very bottom of the page... always.

Processed through Paypal
No account required.

Donate Bitcoin to this wallet:
Donate Ethereum to this wallet:
Donate Litecoin to this wallet:

Buying our over-priced stuff helps us keep things running. Peruse here.

Join our Facebook groupFollow us on TwitterFollow us on InstagramOur RSS Feed

 Home » Freeware Downloads » Anti-Virus, Anti-Malware, Security Utilities » Ransomware File Decryption Tools » Kaspersky RakhniDecryptor    
File - Download Kaspersky RakhniDecryptor

Always scroll to the bottom of the page for the download link.
We don't believe in fake/misleading download buttons and tricks. The link is always in the same place.

Kaspersky RakhniDecryptor
RakhniDecryptor utility for removing Trojan-Ransom.Win32.Rakhni malicious software (.oshit and others)

The malicious programs Trojan-Ransom.Win32.Rakhni, Trojan-Ransom.Win32.Agent.iih, Trojan-Ransom.Win32.Aura, Trojan-Ransom.Win32.Autoit, and Trojan-Ransom.AndroidOS.Pletor are used by malefactors to encrypt files so that their extensions are changed as follows:


For example:

Before: file.doc / After: file.doc.locked

Before: 1.doc / After: 1.dochb15

To regain control over the files encrypted by Trojan-Ransom.Win32.Rakhni, Trojan-Ransom.Win32.Aura, Trojan-Ransom.Win32.Agent.iih, Trojan-Ransom.Win32.Autoit, and Trojan-Ransom.AndroidOS.Pletor, use the RakhniDecryptor utility developed by Kaspersky Lab specialists.

1. How to work with the utility

IMPORTANT: Trojan-Ransom.Win32.Rakhni creates the exit.hhr.oshit file that contains an encrypted password to user's files. If this file remains on the computer, it will make decryption with the RakhniDecryptor utility faster. If the file has been removed, it can be recovered with file recovery utilities. After the file is recovered, put it into %APPDATA% and run the scan with the utility once again. The exit.hhr.oshit file has the following path:

Windows XP: C:\Documents and Settings\<username>\Application Data
Windows 7/8: C:\Users\<username>\AppData\Roaming

To decrypt the files, do the following:

Download the RakhniDecryptor.exe file. The instructions on how to download a file are available below:
For Windows 8 users
For Windows 7 users
For Windows Vista users
Run the RakhniDecryptor.exe file on the infected computer.
In the Kaspersky RakhniDecryptor window click the Change parameters link.
In the Settings window select the objects to scan (hard drives / removable drives / network drives).
Select the checkbox Delete crypted files after decryption (the utility will be deleting copies of original files with the .locked, .kraken and .darkness extensions).
Click ОК.
In the Kaspersky RakhniDecryptor, click the Start scan button.
In the Specify the path to one of encrypted files, select the file you need to restore and click Open.
The utility will start recovering the password. Please mind the Warning! window message.
Wait until the utility is done with decrypting the file (do not exit the program or shut down the computer).

2. Parameters for running the utility from the command prompt

To start the utility for multi-thread password cracking, use the command –threads
For example: RakhniDecryptor.exe –threads 6
The utility starts a 6-thread bruteforce. If the parameter is not specified, the number of threads corresponds to the number of cores.
To restart password cracking from a certain value: –start <number>. To stop password cracking at a certain value: –end <number>.

The lowest value is 0, the highest value is 1000000.

All information about the password cracking process is saved to the report (C:\RakhniDecryptor.<version>_<date>_<creation_time>_log.txt).
For example:
RakhniDecryptor.exe –start 123 – range [123, 1000000]
RakhniDecryptor.exe –start 100 –end 50000 – range [100, 50000]
RakhniDecryptor.exe –end 7000 – range [0, 7000]
RakhniDecryptor.exe – full range [0, 1000000]

Continue below to download this file.

Downloads Views Developer Last Update Version Size Type Rank
6,727 11,518 Kaspersky Lab <img src=""border="0"> Nov 13, 2019 - 20:11 1.54MB EXE 5/5, out of 35 Votes.
File Tags
Kaspersky  RakhniDecryptor  
Whoa! Slow down there, Speedy.
Read this and then continue to the download.

Like seeing no ads? No misleading/fake download buttons?
We like it too! This site has been kept alive for 14 years
because of people just like you who download and donate.
No one is stopping you from downloading without donating
but the site runs on the "Honor System". If your momma
raised you to be honorable, make a donation and download
'til ya turn blue. Make your momma proud!

Thank you! -Randy & Deanna (The Older Geeks)

Monthly operating costs = $610
Donations for November = $2,020
Donations over our monthly goal
are set aside for future upgrades and
handed-over to Deanna for new shoes.

Processed securely through Paypal.
No PayPal account required.
Your bank statement will read: "Home Computer Repair LLC".
This is our computer store.


Just send a check to our computer store payable to Home Computer Repair LLC.
Our address: Home Computer Repair LLC, 208 E. Water St. Mount Vernon, MO 65712

Recent Super Donors ($50+)
Thanks, Warren
Thanks, Warren
Thanks, James
Thanks, Ron

Recent Donors
Thanks, Jon
Thanks, David
Thanks, Sperry
Thanks, Robert
Thanks, Kanna Tech
Thanks, John
Thanks, Potter
Thanks, Carol
Thanks, Steven
Thanks, Graham

   →→ Download Now ←← - Click to Rate File -
Like this download? Share it on Twitter →

Copyright (c) 2021