Avaddon is a new Maze-like ransomware that not only encrypts the user’s data but also steals it and threatens to make it public. To do that, the Avaddon operator recently launched their own data leak site, where they have already published data from Liberty Linehaul and U.S. Auto Parts Network, Inc. What makes this ransomware unique is the way it tries to delete backups. In addition to traditional removal of shadow copies of the user’s files, Avaddon also deletes system backups, disables automatic repair and recovery, and cleans the bin. To do that, it escalates privileges with UAC bypassing through CMSTPLUA COM interface exploitation.

Based on our experience, it’s best NOT to communicate with hackers. Your data will be safe!

Avaddon changes the desktop wallpaper and renames all files by appending the “.avaddon” extension. For example, it renames a file named “1.jpg” to “1.jpg.avaddon“, “2.jpg” to “2.jpg.avaddon“, and so on. Instructions about how to access the website, which victims must suppose use to pay the ransom, are provided in the “[random_numbers]-readme.html” file. Avaddon drops this file in every folder that contains encrypted files.

Each ID will be a unique infection. Please advise us when submitting your quote if you have multiple IDs.

Our team has helped thousands of clients recover from Avaddon ransomware. We guarantee recovery from ALL Avaddon ransomware variants and we back our claim with a No Data = No Charge policy.

Submit an online case or talk to our ransomware specialist to assist with Avaddon Ransomware recovery

Get A Quote NowGet A Quote Now

RANSOMWARE RECOVERY PROCEDURES

Fast Data Recovery is the largest ransomware recovery company based in Sydney, Australia. We support clients nationally and internationally with a 24/7 ransomware recovery team.

Our company has the resources, knowledge, and experience for complete ransomware data recovery, ransomware removal, and further ransomware prevention.

We understand the value of data and work extremely hard to recover your business data as fast as possible.

Most recoveries are completed in 24-48 hours.

We have a 100% success rate on recovering data from Avaddon ransomware attacks and we operate on a no data = no charge policy for peace of mind.

For urgent cases, select the Dharma Priority Evaluation option (for 1-4 hour response time).

The purpose of an evaluation is to determine the complexity of infection and cost associated with the recovery. Every infection is unique and we can only determine the cost of recovery after a proper evaluation.
To obtain an evaluation for your recovery, please follow the steps below.

Step 1: Create a new Case

Click below to create a new case in order to get a quote.

For urgent ransomware recovery please select our DHARMA PRIORITY EVALUATION option for expedited service ($175 AUD, 1-4 hour response time). (equivalent to $130 USD or $110 EUR)

Alternatively, select FREE Evaluation for a standard turnaround at no cost (4-10 days).
Get A Quote Now

• We can assist your business to recover your data from most types of Ransomware including (but not limited to) Avaddon, Dharma, MrDec, Globeimposter, Zeppelin, Revil Ransomware and it’s variants.
• All our recoveries are guaranteed. No data = No charge
• We will use all available resources to ensure your data is recovered in a timely manner.
• The cost of the evaluation will be deducted from your quote.
• For more details about the process of recovery click here

Step 2: Evaluation

When submitting your evaluation, you will be required to attach a sample of the encrypted files. We will use this to identify the encryption key and the ID needed to recover the rest of your files.

Depending on the evaluation you have selected, we will commence analysing your files to determine the cost associated with recovery.

If you elected for Dharma Priority Evaluation, you will receive an invoice from our accounts department. Upon receipt of payment, we will commence the evaluation and a dedicated technician will be assigned to your case.

* Please note that the cost of the evaluation will be deducted from your quote.

* We only provide a quote, if you need a sample file and if it’s possible a fee may apply.  We may not be able to produce a sample file for some variants unless a full recovery is performed.

If you elected for FREE Evaluation, you will receive your quote within 4-10 days.

Step 3: Quote

Upon completion of the evaluation, a quote will be sent to you with the associated cost to recover your data.

* 80% of jobs cost between $750 – $6000 AUD.

* Actual cost can only be determined after we analyse your files.

* More than 90% of jobs are recovered within 24-48 hours. More complex cases may take longer.

* We will start the ransomware recovery process immediately after payment. For a list of our payments options, please click here

* A quote will be provided based on one ID/Extension. You must notify us IMMEDIATELY if you have additional IDs/extensions on your files. Please contact us if you are unsure about this.

* You are protected with our No Data = No Charge policy for the recovery of your data.

* All prices are in Australian Dollars (AUD).

Step 4: Recovery

Once you accept the quote, an email will be sent to you with a REMOTE ACCESS AND PRE-RECOVERY CHECKLIST to prepare your system for recovery.

Please carefully follow the procedures provided in the checklist to avoid any delays with your recovery.
https://fastdatarecovery.com.au/OS/upload/kb/faq.php?id=15 

All recoveries are done directly on your system. No Data will be taken offsite.

We will keep you updated throughout the recovery process and we are contactable 24/7 for your convenience.

• 100% Guaranteed Recovery from most types of ransomware
• Technicians are available 24/7 to start your recovery immediately
• Priority Data Recovery Service (48 hours recovery time in 90% of cases)
• Australian based with 24/7 Worldwide support
• Free Evaluation or 4-24 hours Priority Evaluation for more urgent cases (most evaluation are completed in 4-8 hours)
• No Obligation Fixed Quotes
• No Data No Charge
• All recoveries are done remotely (no need to send us your data!)
• Ransomware Specialists
• Advanced Ransomware Prevention and Security Audit to eliminate the risk of ransomware
• Established company with over 10 years of data recovery experience
• 1000+s of happy clients
• All International clients are welcome

COMPANY DETAILS

Fast Data Recovery is a registered company based in Sydney, Australia. It is part of  the PC Link Professionals Pty Ltd group, which specialises in IT Support, Security and Data Recovery (established in 2008). Due to the exponential growth of demand for ransomware recovery, Fast Data Recovery was established by the PC Link Professionals group in December 2018.

Please visit the Australian Business Register for more information about the establishment of our business:

PC Link Professionals Pty Ltd – https://abr.business.gov.au/ABN/View?abn=20132031826

Fast Data Recovery Pty Ltd – https://abr.business.gov.au/ABN/View?abn=78630597778

CUSTOMER TESTIMONIALS and REVIEWS

We pride ourselves on the quality of work we provide. Customer service is our number one priority and we strive to exceed your expectations. Please read for yourself what other customers are saying about our services:

Google Reviews: https://goo.gl/S7KM9Y
Independent Reviews: https://trustspot.io/store/Fast-Data-Recovery
Clients Written Testimonials: https://fastdatarecovery.com.au/clients-written-testimonials/

Knowledge is power! – It is essential to understand the facts behind ransomware to better protect yourself

Ransomware occurs on a system due to weak security of some sort. If you are reading this you are properly a victim!

Here is some information you need to understand and take seriously

How is your system been comprised and infected with ransomware?

1. Cybercriminals will run a BOT (A bot is a form of an automated scan searching the interned for valurnerable network systems and attempt to comprise its security)
2. Once your system vulnerability has been identified, Hackers will buy the comprised list through underground websites
3. The ransomware hackers will use the details to comprise and infect your system with ransomware
4. Most often the BOT list is sold to multiple hackers

Have you removed the infected system from your network?

1. This is a common mistake!! – isolating the infected system from your network is 50% of the solution.
2. Hackers use group policy to distribute ransomware across your network and it remains undetected by most antivirus/malware software.
3. Ransomware time-bomb, backdoor and keyloogers often implemented on your network to allow hackers to gain access to your network especially if you pay the ransom.

Please be warned, once you have been infected, its emanate that you are very likely to get another attack.

We recommend a full security check on your network to identify the penetration point(s) and make sure adequate security is implemented prior to your data recovery

We offer ransomware prevention and ransomware recovery serivces parallel to ensure your files are recovered on ransomware risk free system without delaying the recovery of your files (our recovery and prevention team work parallel to ensure the prevention and recovery are done simultaneously)

Ask us about our Ransomware Prevention and Security Audit

Get A Quote NowGet A Quote Now

We do not recommend paying hackers. It’s a small chance of getting your files back.

Hackers in some instances may release personal information about your company to the public if you contact them and do not meet their ransom demands. Its strongly recommended not to communicate with them. (using an alternate email does not keep your identity safe as each infection has a unique code to identify you)

Scenarios from customer’s feedback who paid the ransom without engaging a ransomware recovery company to recover without paying the ransom or at least negotiate in case we are unable to recover in a timely manner.
1. The hackers may ask you for extra money after you make the first payment (The trend)
2. The hacker’s email usually gets closed down by the email provider (Once the email is reported to the domain webmaster their email will be shut down. Usually thousands of victims are infected at the same time so the likely-hood of this happening is very high)
3. They send you a sample file, take your money and simply stop responding
4. They may recover all/some of your files

In the event where we are unable to recover from your type of ransomware or able to recover in a timely manner, we can use our resources and experience to obtain the decryption at still offer a No Data No Charge for peace of mind

For a risk-free recovery, Submit an online case or talk to our ransomware specialist to assist with PHOBOS Ransomware recovery

Get A Quote NowGet A Quote Now

Once you realize your system has been infected by PHOBOS Ransomware, remove your infected system from the network (do not shut down as you can cause further damage). Do not make any attempts to remove the ransomware yourself by running an antivirus program as this may also cause further damage to your files.

At this point, you should call in our Ransomware expert to access the situation and provide you with the best way forward.