Description
Your files now end in strange extensions like .locked or .bloccato and will not open. HiddenTear is the first ransomware proof of concept to have its source published, and once that source was out, anyone could tweak it into a new variant, so one family now carries many different extensions. Avast built a free decryptor for it, version 1.0.202.0, about 2.3 MB, a single portable program with a step by step wizard. It only works on variants built on HiddenTear. Other ransomware families are outside what it recognises. It was downloaded from Avast's official CDN and mirrored here, so it runs straight after download.
Dedicated decryptor: covers the many variants made from the HiddenTear source, so you do not hunt for a separate tool per extension
Wizard flow: open it, pick the locations to process, and the tool finds the encrypted files and restores them, with no commands to type
No installation: one exe that runs on double click and installs nothing, so an already infected machine gets no extra components
Free: provided by Avast at no cost, with no account and no need to buy its antivirus first
Features
Dedicated decryptor: covers the many variants made from the HiddenTear source, so you do not hunt for a separate tool per extension
Wizard flow: open it, pick the locations to process, and the tool finds the encrypted files and restores them, with no commands to type
No installation: one exe that runs on double click and installs nothing, so an already infected machine gets no extra components
Free: provided by Avast at no cost, with no account and no need to buy its antivirus first
