Avast Decryption Tool for BTCWare Ransomware

An alarming number of ransomware agents have recently developed to infect unsuspecting computers, encrypt personal files, and ask money in exchange for sensitive data, such as private photos or documents.

Once such agent is called BTCWare, which has been noticed in March 2017 and comes in five variants up to this point. It uses two distinct and powerful security algorithms to lock files (RC4 and AES 192), and its variants can be told apart by taking a look at the extension of the encrypted file: foobar.bmp.[[email protected]].btcware, foobar.docx.[[email protected]].cryptobyte, foobar.docx.onyon, foobar.docx.[[email protected]].theva, and foobar.bmp.[[email protected]].cryptowin.

If your PC has been hit by the BTCWare ransomware, your wallpaper turns red and displays a message saying that you can contact a specific email address to restore your files. Instead of doing this, you can use Avast Decryption Tool for BTCWare Ransomware. With a self-explanatory name, the application is lightweight, portable and asks you to follow some simple wizard steps in the attempt to decrypt your locked files without having to pay for anything.

You can get started by indicating the drives or directories to scan for files encrypted with the BTCWare ransomware. Besides local folders and drives, the tool can scan for network locations. In the following wizard step, Avast Decryption Tool for BTCWare Ransomware has to compare an encrypted file with its original, decrypted counterpart. It shows some common hiding spots for the original files, such as backup disk, email folder, wallpaper folder or Windows sounds. If you happen to know the password necessary for decryption, you can enter it to skip the entire scanning process and simply decrypt the files.

The ransomware removal tool works fast and without issues. However, you should know that it cannot prevent your computer from getting hit by BTCWare again, so you have to make sure to get a powerful antivirus application with a real-time engine that can detect ransomware.