AVG's utility for decrypting files that have been encrypted using Crypt888 ransomware, also known as Mircop . You can recognize it by the fact that the encrypted files are given a Lock prefix. (e.g.

Lock.mojplik.pdf). He also changes Windows desktop wallpaper to black, with an anonymous picture with Guy Fawkes' mask.