How to remove Alvin ransomware

Alvin ransomware – new type of DMR malware that will lock your files

Alvin ransomware is a cryptovirus that encrypts all non-system computer data and demands a ransom for decoding it. It's a new type of DMR malware. The whole encryption is done using AES^[1] algorithms. Victims' infected files gain an extension .ALVIN, hence the name of the virus.

After the dirty deed is done, users notice a new file – “HOW TO RECOVER ENCRYPTED FILES.txt” where the cybercriminals urge the victims to contact them via email – rimon.argan@gmail.com or poeasws@protonmail.com (the latter should be used if the perpetrators don't respond within 24 hours). As a ransom, the victims would have to pay an unspecified amount of Bitcoins.

As a sign of good faith, the cybercriminals offer the victim to test their decoding tool by sending one file (not larger than 1MB) for a free decryption, thus proving that the alleged decoding tool exists. The perpetrators also threaten that they will keep your decryption code only for a week.

In no way does that mean that after contacting the developers of ALVIN virus and meeting their ransom demands, the user will ever get the tool to decode his encrypted data. In most cases, users not only don't get what was promised but instead, some more malware is installed on their device so that the crooks could get even more out of their victims. We strongly recommend to never give in to the ransom demands.

The whole ransom note reads as follows:

"ALVIN RANSOMWARE"   Your unique ID:"54F49153"
=================================================================================================================
All personal files on your computer are encrypted!
=================================================================================================================
TEST OUR TOOL FIRST:
Before you make a payment you should test our tool first for decrypting your data.
Before paying to send us up to 1 file for free decryption.
The total size of the file must be less than 1Mb (the file should not be important to you).
=================================================================================================================
Don't worry, you can restore all your files.
Without the original key recovery is impossible.
If you want to decrypt your files, you have to pay in Bitcoin.
The price depends on how fast you write to us.
If you want to restore files, write us to the e-mail: "rimon.argan@gmail.com"
It is in your interest to respond as soon as possible to ensure the restoration of your files,
Because we won't keep your decryption keys at our server more than one Week because of our security.
=================================================================================================================
Only in case you do not receive a response from the first email address
Withit 24 hours, please use this alternative email adress: "poeasws@protonmail.com"
=================================================================================================================
You can buy bitcoin from here:
https://localbitcoins.net/buy_bitcoins
https://libertyx.com/
https://www.coinmama.com/buy
-You can find other places to buy Bitcoins and beginners guide here:                       
https://www.coindesk.com/information/how-can-i-buy-bitcoins
=================================================================================================================
CAUTION!
1-Using other tools could corrupt your files, in case of using third party software 
We don't give guarantees that full recovery is possible. 
2-Please do not change the name of files or file extension if your files are important to you!

The ALVIN virus might do some more damage, apart from encrypting your data. If it's anything like his big brother DMR ransomware, it will alter Windows host files preventing the victims from visiting security-related sites and networks and finding out alternate data recovery solutions.

That said, users should remove ALVIN virus right after its detection before it has done more harm. Trustworthy and reliable anti-malware software is a must nowadays. If you're undecided, we recommend using SpyHunterCombo Cleaner or MalwarebytesMalwarebytes to completely remove the virus and all its allocated files.

Unfortunately, ALVIN ransomware removal won't decrypt your data, but it will prevent your incoming files from being encrypted in the future. However, corrupted, altered Windows files might keep you from using your computer properly, even after the deletion of the virus. To fix the registry and other locations the virus might have got his dirty hands-on, we recommend using FortectIntego, as this tool might restore your computer so you could use it as if nothing ever happened.

Methods of malware/ransomware distribution

The most common way the ALVIN virus and other malware spreads, according to losvirus.es,^[2] is via email spam.^[3] Users usually receive legitimately looking emails that appear to come from their employers, banks, etc. Attached to these emails are malicious files that, right after opening/downloading, start the infection.

Internet users should always be aware of what they're opening, what they're clicking on because the web is full of traps. Never open emails that look fishy, never open any email attachments without scanning them first with anti-malware software.

Malware is also distributed via torrent sites, such as BitTorrent, The Pirate Bay, etc., whilst downloading game cheat codes, illegal activation tools (aka “cracks”). To evade becoming victims, users should download their desired apps only from the developers.

To ensure systems' safety, users should acquire dependable anti-malware software that would keep them safe while browsing.

ALVIN virus removal guide

Removing malware from an infected system isn't a walk in the park. If you're not a highly-experienced computer user – leave this tall task to the professionals, as you could do more harm than good. Reliable software should be used for removal. To remove ALVIN virus from your computer system, use SpyHunterCombo Cleaner or MalwarebytesMalwarebytes, as both of these apps are able not only to detect the virus but also to completely remove it.

ALVIN ransomware removal should be the first thing you do, but to restore your systems' state to normal, you should take another step, as the ransomware might have corrupted some files and edited the Windows Registry or Power Shell. That altercation might lead to constant system crashes, lag, or any other abnormal behavior. To eradicate these changes made to your computer system, we recommend using FortectIntego or any other similar product.