What is Faust ransomware?
Faust is a ransomware program in the Phobos family. Ransomware programs, generally speaking, encrypt the files on the infected computer with the intention of demanding money for their decryption. But this is not all Faust does.
The virus renames the files when it encrypts them; specifically, it adds a unique ID, the hackers’ e-mail, and .faust file extension to the names. It also leaves a ransom note, which is obviously important as it allows the criminals to communicate their demands. The note, named “info.txt”, can be read on the image above. Another, more verbose, version of the note appears as a pop-up.
It sure looks like the hackers really want you to contact them, leaving their e-mail in the name of every file and in the note as well. It is not hard to understand why; they don’t profit from victims who ignore them. For you, on the other hand, ignoring them may very well be the best course of action. Engaging with the hackers may prompt them to attack you again in the future, and you never know whether they’ll decrypt your files or just take your money and disappear.
To help you with this, the guide below will explain how to remove Faust ransomware and decrypt .faust files without any contact with these criminals.
![ZeRy ransom note:
HELLO!
As you can see all your files are encrypted
To get them back, you have to pay me 0.05 bitcoins
At this address: bc1qgfef9nlwffftl6m5qet95yxa0x7arah0h580gs
After you have made the payment, contact me at this email address: zery@tuta.io
with this topic: [REDACTED]
After payment confirmation, you will receive the keys and a tutorial to decrypt your files.
If you don't own bitcoin, you can buy it very easily here:
www.localbitcoins.com
www.paxful.com
www.coinmama.com
You can find a larger list here:
hxxps://bitcoin.org/en/exchanges
If you don't contact me or you won't make the payment in 5 days
I will assume that you do not want to recover your files
and as a result I will delete the keys generated for your PC.
This is the end of the note. Below you will find a guide explaining how to remove ZeRy ransomware.](https://www.computips.org/wp-content/uploads/2022/11/how-to-remove-zery-ransomware.png)
