Kaspersky CoinVaultDecryptor tool for decrypting files encrypted by Trojan-Ransom.MSIL.CoinVault

Latest update: 13 May 2021 ID: 13331

Do you want to prevent infections? Install Kaspersky for Windows

Kaspersky for Windows protects your digital life with technologies that go beyond anti-virus.


If your system has been breached by malware of the Trojan-Ransom.MSIL.CoinVault family, the files on your computer will be encrypted. A notification will also appear on the screen demanding money in exchange for decrypting the files.

Window with Trojan-Ransom.MSIL.CoinVault ransomware

To remove the malware and decrypt the files:

  1. Scan your computer with a Kaspersky application. See the instructions below.
  2. Download the Kaspersky CoinVaultDecryptor tool and use it to restore your files. See the instructions below.

To learn more about the protection technologies used by Kaspersky, see the TechnoWiki page.


How to scan your computer with a Kaspersky application


How to restore encrypted files with the Kaspersky CoinVaultDecryptor tool


How to save restored files with their original names

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.