Have you been affected by the AVADDON ransomware?


Turn off or disconnect the computer from the network


Do not ever make contact with the cybercriminals


Do not pay the ransom requested for your data


Contact us immediately. We are active 24/7 Worldwide

Don't Panic!​

Avaddon is a new Maze-like ransomware that not only encrypts the user’s data but also steals it and threatens to make it public.

The Avaddon operator recently launched their data leak site to do that. They have already published data from Liberty Linehaul and U.S. Auto Parts Network, Inc.

What makes this ransomware unique is how it tries to delete its backups.

In addition to the traditional removal of shadow copies of the user’s files, Avaddon also deletes system backups, disables automatic repair and recovery, and cleans the bin. To do that, it escalates privileges with UAC bypassing through CMSTPLUA COM interface exploitation.

Avaddon changes the desktop wallpaper and renames all files by appending the “.avaddon” extension.

For example, it renames a file named “1.jpg” to “1.jpg.avaddon”, “2.jpg” to “2.jpg.avaddon”.

Instructions about accessing the website, which victims should use to pay the ransom, are provided in the “[random_numbers]-readme.html” file. Avaddon drops this file in every folder that contains encrypted files.

Help Ransomware is the only company that guarantees the full ransomware recovery of your data.


Click below to submit your case and files for evaluation.


Depending on the evaluation you have selected, we will commence analyzing your files to determine the cost associated with recovery.

*Please note that the evaluation cost will be deducted from your quote.

*We only provide a quote if you need a sample file, and a fee may apply. We may not produce a sample file for some variants unless a full recovery is performed.

If you choose for FREE Evaluation, you will receive your quote within 4-10 days.


Upon completing the evaluation, a quote will be sent to you with the associated cost to recover your data.

*We can determine the actual cost after analyzing your files.

*More than 90% of jobs are recovered within 24-48 hours, and more complex cases may take longer.

*We will start the ransomware recovery process immediately after payment.

We protect you with our No Data = No Charge policy for your data recovery.


Once you accept the quote, an email will be sent to you with a REMOTE ACCESS AND PRE-RECOVERY CHECKLIST to prepare your system for recovery.

Once you accept the quote, an email will be sent to you with a REMOTE ACCESS AND PRE-RECOVERY CHECKLIST to prepare your system for recovery.

All recoveries are made directly on your system. No Data will be taken offsite.

We will keep you updated throughout the recovery process, and we are contactable 24/7 for your convenience.

Why Choose Us

We've more than 25 years of experience in Ransomware Removal and Computer Security
We guarantee the recovery of all files on archives or the devolución of su dinero.
We guarantee the recovery of all files on archives or the refund of your money
We have successfully recovered data from all AVADDON ransomware variants
Because we understand the urgency of our clients, we have 24/7 worldwide attention

28 years of experience in ransomware removal

Worldwide support and 24/7 service

All types of cybersecurity services

# 1 in the global cybersecurity market

100% effective in file recovery

100% guaranteed service or money back

free assessment of ransomware attack

Fast and effective recovery services

qualified and certified cybersecurity experts


What to do

1. Fill in the form by compiling all the fields and describing the problem​.

2. Attach a .zip or .rar file of 5-10 samples of the encrypted files, no larger than 1Mb, and with the ransom note (.txt or .html)​.

3. Press the "SEND" button, and one of our experts will contact you as soon as possible.

“Our team deals with sensitive data, and our customers trust us to keep it all secure. We trusted Help Ransomware because we can’t afford any data loss or outage.”

Samantha Jane
Lark Productions
“When we contacted Help Ransomware, we had just been hit with a major security attack. They took immediate action and had our systems back online within hours.”

Jake Warren
GM Studios
“We had worked with other security firms before, but it was clear from the outset that Help Ransomware would have been different. The results speak for themselves.”

Kim Smith
Squant Media

Guaranteed Ransomware Removal
Fast Recovery of your Data 24/7