Skip to content
  • Active
  • Severity: High
  • Ransomware
  • Windows
  • Verified · Mar 2017

How to remove AvastVirusinfo ransomware virus

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Julie Splinters · Anti-malware specialist

AvastVirusInfo ransomware corrupts victim’s files for good, but still wants a ransom

AvastVirusInfo virus is a scammy and malicious program, which poses as a working ransomware[1] meanwhile it is a poorly programmed piece of malware. It has been discovered that AvastVirusInfo malware is a new version of Xorist ransomware.[2] Just like any other ransomware, AvastVirusInfo encrypts[3] nearly all files on the system and then asks the victim to pay a ransom, however, even if the victim does so, the virus authors will NOT provide the decryption key. This virus completely damages files and makes them useless, so do not waste your money by paying the ransom to cyber criminals. The ransomware targets Russian-speaking users and can be recognized from file extensions that it adds to each encrypted file – this particular virus appends .[8 random chars] extension to every corrupted record.

AvastVirusInfo ransomwareIt is also important to mention that AvastVirusInfo ransomware is NOT related to Avast Antivirus anyhow. It is unclear why ransomware authors like to pretend that they are related to computer security firms. The ransomware corrupts the system and creates a ransom note called КАК РАСШИФРОВАТЬ ФАЙЛЫ.txt, (English version: HOW TO DECRYPT FILES.txt). The ransom note says that all files were encrypted and that if the victim wants to recover them, he needs to pay $15 to authors of the virus. These novice ransomware crooks ask the victim to contact them via email – avastvirusinfo@yandex.com. This email address is where the name of this ransomware originates from. However, we repeat – do not pay the ransom and do not bother yourself writing to cyber criminals – they cannot help you to restore your files. Malware analysts have analyzed this notorious program and discovered that it targets over 1791 different file types (the virus decides to encrypt a file if its extension matches one from its target list). If your files were encrypted by this ransomware, follow the instructions provided below this article to remove AvastVirusInfo malware in the right way. You will need an anti-malware program for AvastVirusInfo removal – please do not try to uninstall this virus on your own, because this way you can only damage the system if you accidentally delete a few wrong files. For virus removal, we believe FortectIntego is the best option.

How can I get infected with this virus?

AvastVirusInfo ransomware is dangerous, and you should do everything to stay away from it. Such viruses are mostly distributed via email, pirated software packs, or compromised websites[4]. The best way to protect yourself from ransomware viruses is to install and always fulfill your anti-malware software with the latest updates, as well as have a data backup to use in case a ransomware manages to slip into your PC. You can avoid ransomware by not opening suspicious emails sent by strangers, also not browse shady third-party websites. Sadly, it gets harder and harder to keep up with the latest malware distribution tricks and recognize phishing[5] or compromised websites, so we assume the anti-malware software is the key to a safe computer.

How can I remove AvastVirusInfo virus from the system?

You will have to use instructions provided below this article to remove AvastVirusInfo virus. We want to say that it is going to be hard to remove the virus, so be patient. We want to remind you that there is no point in paying the ransom because cyber criminals technically cannot provide it due to a bug in the virus code. Therefore, you should start AvastVirusInfo removal this way:

4 comments

Spyware news
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.