Kaspersky RectorDecryptor

RectorDecryptor is a simple utility created by Kaspersky in order to remove the traces of the Trojan-Ransom.Win32.Rector, Xorast, Hanar or Rakhni from your computer and clean the system. This infection is used by cyber-criminals in order to encrypt data stored on a computer and send the PC owner a ransom demand.

The trojan affects JPG, DOC, PDF and RAR files, making them totally unusable. When trying to open such an infected file, you get a message in Cyrillic containing the ransom note and the contact details of the author.

If you experienced such behavior on your computer, it is advisable that you use RectorDecryptor in order to clean the PC and make the infected files available for use again.

The application can scan hard drives, removable devices and network drives in order to detect encrypted files. It is especially designed to disinfect your system, remove all the traces of the ransom trojan and prevent it from infecting your PC ever again.

Optionally, you can set it to automatically delete the encrypted files it finds (even those with changed extensions, such as VSCRYPT, INFECTED, KORREKTOR or BLOC), once the decryption process is finished. It is advisable to move all the affected files to a separate directory and save all the opened documents before proceeding to the scanning process. Also, it allows you to force the decryption of all the files in the user-defined folder.

A log file is automatically created on the local disk, enabling you to monitor all the actions that RectorDecryptor performed.

RectorDecryptor tries to remove the symptoms of the above mentioned ransom malware, but please note that it cannot be used as a permanent protection solution. It is designed to run alongside your antivirus program, providing a tool that can restore the original data and fix your PC.