Bitdefender REvil/Sodinokibi Decryption Tool review
A focused, free decryptor for eligible REvil/Sodinokibi attacks on Windows.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Bitdefender REvil/Sodinokibi Decryption Tool is a free Windows utility for people trying to recover files affected by REvil or Sodinokibi ransomware. It runs on the affected computer and offers both a whole-system scan and a scan of a folder selected by the user. Its scope is deliberately narrow: it is intended for these ransomware strains rather than as a general-purpose file recovery tool.
The workflow includes safeguards and recordkeeping that matter during recovery. Before decrypting, users can choose to back up files; an advanced option can overwrite existing clean files with decrypted equivalents. The tool also creates a log of the decryption process, giving users a record of its work. These options make it more suitable for users who want a targeted recovery process with a backup choice and an activity record than for those seeking a broader endpoint security suite.
The key eligibility boundary is the attack date: Bitdefender says its universal decryptor applies to REvil attacks that occurred before July 13, 2021. That makes it a reasonable option to consider when the affected system is Windows and the encryption is attributable to an eligible REvil/Sodinokibi attack. It is not the right choice for other ransomware strains or attacks outside that stated REvil window; users in those situations should look for a recovery tool matching their specific strain and circumstances.
Bitdefender REvil/Sodinokibi Decryption Tool pros and cons
- Where it wins
- Scans an entire system or a user-selected folder
- Can back up files before decryption
- Logs the decryption process and can overwrite clean files
- Where it doesn't
- Coverage is limited to REvil/Sodinokibi
- Applies to REvil attacks before July 13, 2021
- Windows-only utility
Bitdefender REvil/Sodinokibi Decryption Tool fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update