Emsisoft Decrypter for Nemucod can decrypt files that have been renamed to *.crypted and when you have a ransom note named DECRYPT.txt on your desktop.

In order for Emsisoft Decrypter for Nemucod to be effective, you will require an encrypted file of at least 4096 bytes in size as well as its unencrypted version. To start the decrypter select both the encrypted and unencrypted file and drag and drop them onto the Emsisoft Decrypter for Nemucod executable.

Once the mouse key is released, the decrypter will start to reconstruct the required encryption parameters. Depending on the ransomware, this process can take a significant amount of time. The decrypter will display the reconstructed encryption details once the recovery process finished.