Home Malware Programs Ransomware Aviso Ransomware

Aviso Ransomware

Posted: October 16, 2016

Threat Metric

Threat Level: 10/10
Infected PCs: 15
First Seen: October 16, 2016
OS(es) Affected: Windows


The Aviso Ransomware (also known as Crypt888 Ransomware) is a new piece of crypto threat which, fortunately, has already been decrypted by malware researchers successfully. The Aviso Ransomware uses the AES-256 encryption to encrypt the contents of files found on the victim's computer and then renames them so that they'll be easier to recognize. The naming pattern that the Aviso Ransomware uses renames files by appending the 'Lock.' prefix to their names (e.g. 'document.txt' may become 'Lock.document.txt').

The Aviso Ransomware's lock screen contains a ransom message written in Portuguese. It urges users to pay 2000 Brazil Reals (approximately $600) via Bitcoins, and in exchange, they'll receive decryption instructions. However, paying the ransom fee is not necessary because a free decryptor is already available thanks to a free decryption tool released by malware researchers. The ransomware operators have also left an e-mail address that their victims can use to contact them if they have any questions – 'informacaoh@gmail.com.'

According to media reports, the Aviso Ransomware is distributed via fake e-mail spam messages, which are camouflaged to look as if they were sent by a reputable Brazilian government body. We advise users to be extra careful when opening e-mail attachments, especially if they didn't expect to receive an e-mail with an attachment. It is also recommended to use sufficient anti-malware protection at all times since this is the most efficient way to stop ransomware infections before they get a chance to cause damage.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



file.exe File name: file.exe
Size: 1.04 MB (1049600 bytes)
MD5: 86c85bd08dfac63df65eaeae82ed14f7
Detection count: 71
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: October 16, 2016
Loading...