AVG Decryption Tool For Bart

AVG Decryption Tool For Bart is a small piece of software developed to help users recover important documents, videos, photos and other files that have been hijacked by Bart ransomware.

Similarly to other malware in this category, Bart ransomware is commonly distributed via spam emails that include infected attachments and more rarely, links to malicious websites. Once you open the attachment, the malware creates an executable in the %LocalAppData% folder and begins to scan your computer for files that feature specific extensions and that can be encrypted.

The encrypted files are moved to a protected archive that features the bart.zip extension and instead of you normal files, you can find a recover.txt file in each of the directories that are now encrypted. Moreover, your desktop wallpaper will be changed to recover.bmp and a recovere.html note in your default browser.

First off, you should know that you need to have the same file as the one that has been hijacked. While they may not be easy to locate, make sure you take the time to look for them in your email client, cloud or other backups that you performed recently.

Once you find the original file, you can copy it to your desktop so that you can use it for comparison with the password-protected file. In case you have doubts about copying important files to an infected computer, you should know that Bart no longer locks files after it displays the ransom message.

From this point on, the application should be able to brute force the password automatically. Then again, the decryption tool states that it may need some time before finding the correct password.

If you notice you have several files with the bart.zip extension instead of the documents or photos that you expected and you would like to recover them, then perhaps AVG Decryption Tool For Bart could come in handy.