Description
Photos and documents will not open, and each one has been replaced by a password protected ZIP with a ransom note beside it. That is Bart: it locks every file inside an encrypted archive and asks for payment to hand over the password, and it needs no command server, so it works offline too. Avast built a free decryptor for it, version 1.0.202.0, about 2.3 MB, a single portable program with a step by step wizard. It only works on files locked by Bart. Files hit by other ransomware families will not be recognised. It was downloaded from Avast's official CDN and mirrored here, so it runs straight after download.
Dedicated decryptor: built for the way Bart locks files inside password protected ZIPs, so the originals come out without paying the ransom
Wizard flow: open it, pick the locations to process, and the tool finds the encrypted files and restores them, with no commands to type
No installation: one exe that runs on double click and installs nothing, so an already infected machine gets no extra components
Free: provided by Avast at no cost, with no account and no need to buy its antivirus first
Features
Dedicated decryptor: built for the way Bart locks files inside password protected ZIPs, so the originals come out without paying the ransom
Wizard flow: open it, pick the locations to process, and the tool finds the encrypted files and restores them, with no commands to type
No installation: one exe that runs on double click and installs nothing, so an already infected machine gets no extra components
Free: provided by Avast at no cost, with no account and no need to buy its antivirus first
