Kaspersky RannohDecryptor

Kaspersky RannohDecryptor is a lightweight and portable piece of software that automatically scans the computer to identify files infected with the Trojan-Ransom.Win32.Rannoh and Trojan-Ransom.Win32.Cryakl malware agents and attempt to decrypt them. It requires minimal user assistance, so it can be handled by anyone, regardless of their previous experience with antivirus software.

As there is no setup pack involved, you can save the program files to a custom location on the disk and just click the executable to run the tool.

Another possibility is to save Kaspersky RannohDecryptor to a pen drive or other removable storage unit, in order to run it on any PC directly and without previous installers. What's more, it leaves the Windows registry untouched, so it does not increase the risk of OS stability issues.

The interface is made from a small frame with a clean look, where Kaspersky RannohDecryptor shows some information regarding the steps it takes to find the encrypted files and decrypt them. It recommends you to keep a copy of the original items, as well as to save any ongoing work before scan.

By default, the program looks into all hard drives and removable disks. You can exclude any of these two or include network drives, as well as ask Kaspersky RannohDecryptor to immediately delete the encrypted files (original infected ones) after decryption.

We have not come across any issues in our tests, since the app did not hang, crash or pop up error messages. It has a good response time and carries out scan jobs in reasonable time while remaining light on system resources.

You should keep in mind that Kaspersky RannohDecryptor does not offer real-time protection against the Trojan-Ransom.Win32.Rannoh and Trojan-Ransom.Win32.Cryakl agents, so you have to get a full-featured antivirus application that can do this.