Security Stronghold security made easy

How to remove Bad Rabbit and decrypt files

* What is Bad Rabbit

* Download Bad Rabbit Removal Tool

* Decrypt files after Bad Rabbit infection

* Remove Bad Rabbit manually

* Get Professional Support

* Read Comments

Threat indicator: HIGH

Threat's profile

Name of the threat:

Command or file name:

Threat type:

Affected OS:

Bad Rabbit



Win32 (Windows XP, Vista, Seven, 8)

Bad Rabbit

Bad Rabbit intrusion method

Bad Rabbit copies its file(s) to your hard disk. Its typical file name is dispci.exe. Then it creates new startup key with name Bad Rabbit and value dispci.exe. You can also find it in your processes list with name dispci.exe or Bad Rabbit. Also, it can create folder with name Bad Rabbit under C:\Program Files\ or C:\ProgramData.

If you have further questions about Bad Rabbit, please call us on the phone below. It is toll free. Or you can use programs to remove Bad Rabbit automatically below.

Download SpyHunter by Enigma Software Group LLC

Download this advanced removal tool and solve problems with Bad Rabbit and dispci.exe (download of fix will start immediately):

Download Removal Tool to remove Bad Rabbit

* SpyHunter was developed by US-based company EnigmaSoftware and is able to remove Bad Rabbit-related issues in automatic mode. Program was tested on Windows XP, Windows Vista, Windows 7, Windows 8 and Windows 10. Trial version of SpyHunter provides detection of computer threats like Bad Rabbit for FREE.

Features of SpyHunter 4

* Removes all files created by Bad Rabbit.

* Removes all registry entries created by Bad Rabbit.

* You can activate System and Network Guards and forget about malware.

* Can fix browser problems and protect browser settings.

* Removal is guaranteed - if SpyHunter fails ask for FREE support.

* 24/7 Spyware Helpdesk Support included into the package.

Download Stronghold AntiMalware by Security Stronghold LLC

Download antimalware designed specifically to remove threats like Bad Rabbit and dispci.exe (download of fix will start immediately):

Download AntiMalware to remove Bad Rabbit

Features of Stronghold Antimalware

* Removes all files created by Bad Rabbit.

* Removes all registry entries created by Bad Rabbit.

* Fixes browser redirection and hijack if needed.

* "Toolbar Remover" tool will help you get rid of unwanted browser extensions.

* Removal is guaranteed - if Stronghold AntiMalware fails ask for FREE support.

* 24/7 Helpdesk Support and 5 hours of Remote Support via GoToAssist included into the package.

Alternative Solution - Download Kaspersky Rescue Disk

If virus does not allow you to boot in Safe Mode download Kaspersky Rescue Disk remove Bad Rabbit:

Download Kaspersky Rescue DiskDownload Kaspersky Rescue Disk

How to use Kaspersky Rescue Disk

Make bootable Kaspersky Rescue Disk from CD or USB.

  1. After you downloaded ISO image above - Record the Kaspersky Rescue Disk image to a CD/DVD
  2. To burn it to CD use one of the programs: Free ISO Burner, ISO Recorder, Nero Burning ROM

    To burn it to USB use one of the programs: ISO to USB, Rufus

  3. Set your system to boot from CD or USB (not from hard drive)
  4. Use the Delete or F2 keys, to load the BIOS menu on the start of PC boot. In the BIOS menu choose loading from Removable drive.

kaspersky rescue disk update

Use Kaspersky Rescue Disk to remove Bad Rabbit.

  1. Boot your computer from Kaspersky Rescue Disk in graphic mode.
  2. Click the button in the bottom left hand corner of the screen.
  3. Update databases of Kaspersky Rescue Disk. Go to the My Update Center tab and click on the Start update button.
  4. Go to the Objects Scan tab.
  5. Put a tick near all checkboxes and click on the Start Objects Scan button.
  6. Remove all found threats.
remove Bad Rabbit with kaspersky rescue disk

Let our support team solve your problem with Bad Rabbit and remove Bad Rabbit right now!

support person

Submit support ticket below and describe your problem with Bad Rabbit. Support team will offer you solution in several minutes and give a step-by-step instruction on how to remove Bad Rabbit. Trouble-free tech support with over 10 years experience removing malware.

Submit support ticket

Software Industry Professionals Member
Threat's description and solution are developed by Security Stronghold security team.

Here you can also learn:

* Technical details of Bad Rabbit threat.

* Manual Bad Rabbit removal.

* Download Bad Rabbit Removal Tool.

How to remove Bad Rabbit manually?

This problem can be solved manually by deleting all registry keys and files connected with Bad Rabbit, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by Bad Rabbit. However, this threat may not allow you to do htis in some cases, thats why, we recommednd you to use one of the above options.

To get rid of Bad Rabbit, you should:

file logo

1. Kill the following processes and delete the appropriate files:

• infpub.dat
• cscc.dat
• dispci.exe

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use Bad Rabbit Removal Tool for safe problem solution.

windows folder logo

2. Delete the following malicious folders:

no information

windows registry logo

3. Delete the following malicious registry entries and\or values:

no information

Warning: if value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use Bad Rabbit Removal Tool for safe problem solution.

How to decrypt files after Bad Rabbit infection?

You may attempt to decrypt files infected by different versions of CryproLocker. Please, visit following site to decrypt your files:

You will need to upload certain files and wait for the service to decrypt it.

Information provided by: Aleksei Abalmasov

Next threat: Sensearch »

« Back to catalog

Home | Partners | Shop | Support | Terms of use | Contact Us | Privacy Policy | Sitemap

Copyright © 2017 Security Stronghold. All Rights Reserved. All content on this website is protected and belongs to Security Stronghold LLC.