What is Zfdv ransomware
Zfdv is a new strain of the STOP/Djvu ransomware. For this reason, it is very similar to other ransomware programs in this family, such as Ribd or Ygkz. Ransomware, as you probably already know, is a class of illegal programs that make hackers money by encrypting files and asking for payment to decrypt them.
Zfdv in specific asks for $980, though the ransom note also states that victim who act quickly will get a 50% discount and will only have to pay $490. This, too, is typical for STOP/Djvu. Speaking of the ransom note, it is called “_readme.txt”, and is placed on the Desktop. For those that are interested in details, the image above contains the full text of the note – though once you’ve seen one STOP/Djvu ransom note, you’ve seen them all.
When Zfdv encrypts the files, is also changes the files’ extensions. Many ransomware programs do this, presumably to make it more evident to the victim that an attack has happened. The files Zfdv encrypts are given the extension .zfdv – hence the name.
The “good” thing about being infected with Zfdv is that STOP/Djvu is a well-known ransomware family that is relatively easy to get rid of. This article will explain how to remove Zfdv from your computer and how you can try to decrypt .zfdv files.
![Horsemagyar's ransom note:
::: Hello my dear friend :::
Unfortunately for you, a major IT security weakness left you open to attack, your files have been encrypted
If you want to restore them,write to our skype - HORSEMAGYAR DECRYPTION
Also you can write ICQ live chat which works 24/7 @HORSEMAGYAR
Install ICQ software on your PC https://icq.com/windows/ or on your mobile phone search in Appstore / Google market ICQ
Write to our ICQ @HORSEMAGYAR https://icq.im/HORSEMAGYAR
If we not reply in 6 hours you can write to our mail but use it only if previous methods not working - horsemagyar@onionmail.org
Attention!
* Do not rename encrypted files.
* Do not try to decrypt your data using third party software, it may cause permanent data loss.
* We are always ready to cooperate and find the best way to solve your problem.
* The faster you write, the more favorable the conditions will be for you.
* Our company values its reputation. We give all guarantees of your files decryption,such as test decryption some of them
We respect your time and waiting for respond from your side
tell your MachineID: [REDACTED] and LaunchID: [REDACTED]
Sensitive data on your system was DOWNLOADED.
If you DON'T WANT your sensitive data to be PUBLISHED you have to act quickly.](https://www.computips.org/wp-content/uploads/2022/05/how-to-remove-horsemagyar-ransomware.png)
