Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Kaspersky RakhniDecryptor

Free#3 of 21 in Ransomware Decryption Tools

Kaspersky RakhniDecryptor: A broad free decryptor with drive scanning and command-line recovery controls. Ranked #3 of 21 in Ransomware Decryption Tools by our editors (9.0/10); pricing: Free plan; best for windows users with diverse supported infections.

9.0/10Editor score
Kaspersky RakhniDecryptor9.0 Visit Kaspersky

At a glance

  • Editor score
    9.0 / 10
  • Pricing
    Free plan
  • Best for
    Windows users with diverse supported infections
  • Free plan
    Yes
  • Paid from
    Free
  • Supported strains
    Conti; Ragnarok; Fonix; Rakhni; Agent.iih; Autoit; Aura; Pletor; Rotor; Lamer; Cryptokluchen; Democry; GandCrypt (versions 4 and 5); Bitman (versions 3 and 4); Libra; Lobzik; Lortok; Yatron; Chimera; CryFile; Crypren.afjh (FortuneCrypt); Nemchig; Mircop; Mor; Crusis (Dharma); AecHu; Jaff; Cryakl; Maze; Sekhmet; Egregor
  • Facts checked
    5 Oct 2026
  • Where it wins

    • Supports a broad list of named ransomware families, including Conti and Maze
    • Scans hard, removable, and network drives for affected files
    • Offers command-line controls, resumable cracking ranges, and reports
  • Where it doesn't

    • Recovery is limited to the ransomware families it supports
    • Windows-only, with no listed support for other operating systems
    • Password-cracking controls require command-line operation

Our verdict on Kaspersky RakhniDecryptor

Kaspersky RakhniDecryptor is a free Windows utility for recovering files encrypted by supported ransomware families. Its published list spans strains including Conti, Ragnarok, Rakhni, Maze, and Egregor, making it relevant to Windows users who need to check for coverage across varied infections. Users can select hard, removable, or network drives to scan and provide an encrypted file for decryption. The utility is distributed as a downloadable ZIP archive and runs as RakhniDecryptor.exe.

Its standout strength is breadth paired with practical recovery controls. The tool can delete encrypted file copies after decryption, and its command-line options include multithreaded password cracking, resuming a cracking range, or limiting that range. It can also save a report to a specified path. These controls make it more than a simple file picker, particularly for users or administrators who need to manage a recovery process through command-line operation. The tradeoff is that these options add operational complexity; users seeking a purely guided recovery experience may prefer a simpler alternative.

RakhniDecryptor is free, and Kaspersky lists it among its recovery tools. There are no paid tiers to compare. The deciding constraint is compatibility: decryption applies to supported families, not ransomware generally, so users should check whether their infection appears on the supported list before relying on it. Choose it when the affected system runs Windows and the infection is among its covered strains, especially if drive scanning or command-line controls are useful. Look elsewhere if the system is not Windows or the infection is outside that supported range.

Your product? Our editors can test Kaspersky RakhniDecryptor in depth and publish a review, labelled as paid · from $149/mo →

Kaspersky RakhniDecryptor pricing

Plans Free planFree Free to use — no paid tier required for the core job.
See plans on support.kaspersky.com

Kaspersky RakhniDecryptor fact sheet

Free planYes
Paid fromFree
Supported strainsConti; Ragnarok; Fonix; Rakhni; Agent.iih; Autoit; Aura; Pletor; Rotor; Lamer; Cryptokluchen; Democry; GandCrypt (versions 4 and 5); Bitman (versions 3 and 4); Libra; Lobzik; Lortok; Yatron; Chimera; CryFile; Crypren.afjh (FortuneCrypt); Nemchig; Mircop; Mor; Crusis (Dharma); AecHu; Jaff; Cryakl; Maze; Sekhmet; Egregor
Offline useNot verified
Recovery methodDecryptor
Supported operating systemsWindows (the tool is launched as RakhniDecryptor.exe)
Command-line operationYes
DeploymentDesktop
PlatformsWindows
Built forSolo, Small business, Mid-market, Enterprise (editorial estimate)
PricingFree plan
Websitesupport.kaspersky.com
Facts checked5 Oct 2026

Alternatives to Kaspersky RakhniDecryptor

See all Kaspersky RakhniDecryptor alternatives →

Kaspersky RakhniDecryptor vs the competition

Compare Kaspersky RakhniDecryptor with any tool side by side →

Used Kaspersky RakhniDecryptor? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Kaspersky RakhniDecryptor for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — Kaspersky RakhniDecryptor 9.0/10

Kaspersky RakhniDecryptor is listed in our Ransomware Decryption Tools directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/kaspersky-rakhnidecryptor/"><img src="https://www.itechguides.com/best/badge/kaspersky-rakhnidecryptor.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update