Avast Decryption Tools - BTCWare
Decryption Tools: BTCWare
Avast has released a free decryptor tool for victims of the BTCWare ransomware, allowing them to recover their files without paying the hackers. The tool is available as a standalone free download and also included in the Bitdefender Ransomware Recognition Tool.
The tool works by analyzing the ransomware’s source code to figure out how to decrypt the encrypted files. It also uses a brute force method to try to retrieve the key used for encryption, and in many cases it successfully decrypts the affected files. However, the tool cannot decrypt all files, and for example some with a proprietary or unknown format (such as text files) will remain unrecoverable.
BTCWare is an updated version of the CrptXXX ransomware family and has been seen attacking users in Russia, Japan, and South Korea. It targets computers connected to the Internet and typically gains access through weak passwords and Remote Desktop services.
As with other ransomware infections, we recommend that you never pay the demanded amount of money to cyber criminals. There is no guarantee that they will ever decrypt your files and in most cases, they ignore victims once they receive the payment. Instead, you should restore the files/system from a clean backup.