Kaspersky WildfireDecryptor

Kaspersky WildfireDecryptor is a tiny utility designed to help you unlock and recover files that have been encrypted by Wildfire ransomware.

Wildfire is a type of ransomware that commonly spreads via unsolicited emails whose headers have been modified to imitate well-established shipping companies. More precisely, unsuspecting victims are informed that they are to receive a package, but the delivery failed. It goes without saying that most people are curious to learn what this is all about.

However, once they open the files, Wildfire infiltrates their computer and targets mostly Microsoft documents and PDF files, which it encrypts using RSA or AES-265 encryption algorithms. The files' extensions are replaced with WFLX and hence, users are no longer able to open them. As you would expect, the malware leaves notes on how to decrypt the files in each of the folders it attacks as well as on the desktop.

It is important to remark that the ransomware deletes all Shadow Volume Copies on the computer. Consequentially, there is no point to try to recover the files from previous system restore points backups.

The idea behind the tool is to help you find the encryption key for the files that have been infected with Wildfire. As it is recommended, it is best if you can provide a path to one of the files that have been hijacked and make sure that you created a backup of all documents before you proceed.

The tool enables you to specify the objects to be scanned, be it hard drives, removable disks or network volumes, in case the infection has spread outside your computer. At the same time, you can configure the app to delete the infected files from your computer, once it identifies the decryption key and you recovered your files.

On a side note, do not forget to erase the Wildfire executable so you do not have to undergo this tedious experience once again. The executable can be found in the %LocalAppData% folder.

In the unfortunate event that you are dealing with a ransomware infection, then perhaps Kaspersky WildfireDecryptor could lend you a hand.