Description
The wallpaper has been swapped, a popup says your files are encrypted, every document has picked up an unfamiliar extension, and there is an email address to negotiate a price: that is what Legion ransomware looks like. If you would rather not pay, let Avast’s decryptor have a go first.
This one is built specifically for Legion: version 1.0.840, about 2.8 MB, one program with no installer. It opens as a wizard you click through, and it tries to restore the documents Legion renamed and locked. It only handles files Legion encrypted, so it is not a general-purpose tool. The file was taken from Avast’s official download address and mirrored here.
Dedicated decryptor: Aimed at the Legion family alone, restoring the files it renamed and encrypted.
Wizard flow: Start from the welcome page and follow the prompts, with no commands to type.
No installation: One program that runs straight after download.
Free: Provided by Avast at no cost.
This one is built specifically for Legion: version 1.0.840, about 2.8 MB, one program with no installer. It opens as a wizard you click through, and it tries to restore the documents Legion renamed and locked. It only handles files Legion encrypted, so it is not a general-purpose tool. The file was taken from Avast’s official download address and mirrored here.
Features
Dedicated decryptor: Aimed at the Legion family alone, restoring the files it renamed and encrypted.
Wizard flow: Start from the welcome page and follow the prompts, with no commands to type.
No installation: One program that runs straight after download.
Free: Provided by Avast at no cost.
