Description
A clown face fills the screen, saying files will start being deleted unless you pay in time, a fresh batch goes every so often, and your files now end in extensions like .payransom. That is the Jigsaw ransomware, and the countdown is what makes people panic. Avast built a free decryptor for it, version 1.0.202.0, about 2.3 MB, a single portable program with a step by step wizard. It only works on files encrypted by Jigsaw. Disconnect from the network and stop the ransomware process first so it cannot delete more. It was downloaded from Avast's official CDN and mirrored here, so it runs straight after download.
Dedicated decryptor: restores files that Jigsaw encrypted and renamed, with no payment and no race to find bitcoin before it deletes more
Wizard flow: open it, pick the locations to process, and the tool finds the encrypted files and restores them, with no commands to type
No installation: one exe that runs on double click and installs nothing, so an already infected machine gets no extra components
Free: provided by Avast at no cost, with no account and no need to buy its antivirus first
Features
Dedicated decryptor: restores files that Jigsaw encrypted and renamed, with no payment and no race to find bitcoin before it deletes more
Wizard flow: open it, pick the locations to process, and the tool finds the encrypted files and restores them, with no commands to type
No installation: one exe that runs on double click and installs nothing, so an already infected machine gets no extra components
Free: provided by Avast at no cost, with no account and no need to buy its antivirus first
