AVG's tool for decrypting files that have been encrypted with ransomware Legion. You can recognize it by adding a long [email protected]$.legion (e.g. [email protected]$.legion) to the file name after encryption.

The desktop wallpaper is also changed: on a white background there is an inscription informing about data encryption and displaying the red e-mail address [email protected].