Radamant v2 ransomware-affected file
File type: Ransomware encrypted file
A .rrk file is an original file encrypted by Radamant v2 ransomware. The ransomware changes the original file's extension to .rrk.
The file contains the encrypted contents of the affected file and cannot be used normally until it is decrypted.
File type category:
Ransomware encrypted file
Date updated: October 6, 2026
Radamant v2 is ransomware for Microsoft Windows. It encrypts users' files and demands a ransom payment in bitcoins. The ransomware renames encrypted files with the .rrk extension.
When Radamant ransomware is installed, it copies itself to C:\Windows\directx.exe and creates autorun Registry entries so that the infection starts each time the user logs in to Windows.
Emsisoft Decrypter for Radamant is a Windows utility designed to decrypt files affected by this ransomware. The .rrk extension identifies an encrypted file rather than a normal document format.
A normal application cannot open a .rrk file because its contents are encrypted. On Microsoft Windows, use Emsisoft Decrypter for Radamant to attempt recovery of the original file.
Decryption may not be possible for every affected file. If no compatible decrypter is available, recovery may require waiting for one to be released publicly. Do not rename the file merely to remove the .rrk extension, as this does not decrypt its contents.
A .rrk file cannot be meaningfully converted while it is encrypted. It must first be decrypted with a compatible Radamant decryption utility, such as Emsisoft Decrypter for Radamant; the resulting file can then be opened or converted according to its original format.
Software apps that record to rrk files:
Microsoft Windows
Language
