ScatterDecryptor tool for restoring files encrypted by Trojan-Ransom.Win32.Scatter and Trojan-Ransom.BAT.Scatter ransomware
Latest update: October 7, 2024
ID: 11333
Do you want to prevent infections? Install Kaspersky for Windows
Trojan-Ransom.Win32.Scatter and Trojan-Ransom.BAT.Scatter encrypt user files with an open cryptographic key to make them inaccessible. Use the ScatterDecryptor tool to decrypt the files with the PZDC, CRYPT and GOOD extensions.
To prevent infection:
- Download and install new Kaspersky applications that protect against screen-locking and file-encrypting malware.
- Follow the recommendations on how to protect your PC against file-encrypting ransomware.
Learn more about the technologies that Kaspersky uses to protect against malware, including encryptors, on the TechnoWiki page.
How to decrypt files with Kaspersky ScatterDecryptor
- Download the ScatterDecryptor.zip archive and extract the files from it using the instructions.
- Open the folder with the archive files.
- Run the ScatterDecryptor.exe file.
- Read the License agreement carefully. If you agree to all of its terms, click Accept.
- Click Change parameters.
- In the Objects to scan section, select the drives you want to scan. To remove encrypted files after the scan, select the Delete crypted files after decryption check box in the Additional options section. Click OK.
- Click Start scan.
- Specify the path to one of the encrypted files.
To view information about the scan, click Details.
To view the history of all scans performed previously, click Report in the top-right corner.
