How to remove Bkqfmsahpt ransomware

Bkqfmsahpt ransom note:

Hello!


All your files are encrypted!


Email me if you want to get your files back - I will do it very quickly!
Contact me by email:


datasto100@tutanota.com
restore_help@swisscows.email


The subject line must contain an encryption extension or the name of your company!
Do not rename encrypted files, you may lose them forever.
You may be a victim of fraud. Free decryption as a guarantee.
Send us up to 3 files for free decryption.
The total file size should be no more than 1 MB! (not in the archive), and the files should not contain valuable information. (databases, 

backups, large Excel spreadsheets, etc.)


To contact us, we recommend that you create an email address at protonmail.com or tutanota.com
Because gmail and other public email programs can block our messages!


If you do not receive a response from us for a long time, check your spam folder.


===========================================================


Customer service TOX ID: 0FF26770BFAEAD95194506E6970CC1C395B 04159038D785DE316F05CE6DE67324C6038727A58
Only emergency! Use if support is not responding

This is the end of the note. Below you will find a guide explaining how to remove Bkqfmsahpt ransomware.

What is Bkqfmsahpt ransomware?

Bkqfmsahpt is the name of a new ransomware program. It is similar to another such program we’ve reported on recently, specifically Yguekcbe. This is not surprising, as both belong to Snatch ransomware family.
Once on the victim’s computer, it performs several malicious actions. The first of these is to encrypt the files using a cryptographic algorithm. Such files cannot be opened or edited unless they’re decrypted. The second is to rename these files, adding .bkqfmsahpt file extension to their names. This is how the virus got its name. The third, and the last, action is the creation of a ransom note. The note, named “HOW TO RESTORE YOUR FILES.TXT”, serves as a way for the hackers to communicate their demands. You can read its full text on the image above.
The message contained in the note makes it evident that Bkqfmsahpt specifically targets companies, though this doesn’t mean that private individuals can’t get infected with it. The note does not mention the price, only contact information.
But contacting the hackers may be a bad idea. Although we don’t have information on these hackers in particular, generally they tend to simply collect the money and disappear. This is why it may be wise to explore your other options. Some of these ways to remove Bkqfmsahpt ransomware and decrypt .bkqfmsahpt files are described in the guide below.

Scroll to top