Category: Ransomware

=&0=& and possibly get the decryptor from them. This is not reliable: they might not send you the decryptor at all, or it might be poorly done and fail to decrypt your files. =&1=& that would allow you to decrypt files without paying. This turn of events is possible but not very probable: out of thousands of known ransomware variants, only dozens were found to be decryptable for free. You can visit NoMoreRansom site from time to time to see if free decryptor for GandCrab exists. =&2=&. For example, antivirus vendor =&3=& offers its own decryption services. They are free for users of Dr.Web Security Space and some other Dr. Web’s products if Dr. Web have been installed and running at the time of encryption (more detail). For users of other antiviruses the decryption, if it’s deemed possible, will cost €150. According to Dr. Web’s statistics, the probability of them being able to restore files is roughly 10%.

Other ways to recover encrypted files: READ MORE

What is Nqsq ransomware

Nqsq is a new version of STOP (Djvu) ransomware that adds .nqsq extension to the files it encrypts. Nqsq ransomware may end up on a computer after a user installs some pirated software or opens a file downloaded from an untrustworthy source. Nqsq encrypts users’ files and leaves ransom notes named “_readme.txt” with the ways to contact the criminals and the amount of payment to decrypt the files. READ MORE

What is Efdc ransomware

Efdc is a new variant of STOP (Djvu) ransomware. Efdc may end up on a computer after a user installs some pirated software or opens a file downloaded from an untrustworthy source. Efdc encrypts users’ files and appends .efdc extension to those files. The ransomware also leaves ransom notes called _readme.txt with the users’ unique ID, the ransomware developers’ contact information and the amount of ransom to pay for decryption. READ MORE

What is Orkf ransomware

Orkf is a new variant of STOP (Djvu) ransomware. Orkf may end up on a computer after a user opens a file downloaded from an untrustworthy source (a software crack, a fake Flash Player update, an attachment in a spam email, etc.). Orkf encrypts users’ files and adds the .orkf extension to those files. The ransomware also leaves ransom notes named “_readme.txt” in folders with encrypted files. The ransom notes contain the victim’s personal ID, ransom amount and instructions on how to contact the ransomware developers. READ MORE