Mole Decryptor

Created as a project in the No More Ransom Initiative, the Mole Decryptor promises to analyze encrypted files on your computer, find the decryption key and recover infected files without you having to pay a dime.

The Mole ransomware is part of the CryptoMix strain, using spam email as a distribution channel. The ransomware gains administrative privileges, locks you out of your files and then runs different commands to disable startup recovery and delete Volume Shadow copies, making data recovery difficult to achieve.

Files encrypted by the Mole ransomware usually have the "mole" string appended to their name. It is easy to figure out if this type of malware has reached your computer.

A simple command line utility, Mole Decryptor makes it easy for victims of the Mole ransomware to try decrypting their data without having to pay up the requested ransom. The only condition is that the malware be removed from the system beforehand. Otherwise, files will continue to be encrypted repeatedly, as the developers state.

Mole Decryptor runs in a console with administrative privileges. It starts searching for encrypted files as soon as you launch it, analyzing each and every drive on your computer. Once a match is found, the application initializes the deriving process, in the attempt to find the decryption key. Obviously, the following step is to decrypt all the files that were locked by the ransomware.

While usage is simple and it does not require more than two or three clicks, it might be possible that not all the files are decrypted.

In case you are experiencing issues, you are advised to send an email to the development team, along with the automatically generated log file.