What is Erqw ransomware?
Erqw is a file-encrypting virus, which means that it’s classified as ransomware. More specifically, Erqw is a variant of STOP/Djvu ransomware.
There are thousands of such variants, and hundreds of recent ones. That is because it is very easy for the hackers to produce a new STOP/Djvu variant; all of them strongly resemble one another as hackers reuse most of the code. For example, if you check out Assm ransomware, another STOP/Djvu variant that’s been active recently, you will find that it’s very similar to Erqw.
The easiest way to tell these viruses apart is to look at the names of encrypted files. Very often, ransomware programs will rename them; in our case, the files are given .erqw file extension. This means that a file named “song.mp3” would be renamed to “song.mp3.erqw” after encryption.
Erqw virus creates a ransom note, named “_readme.txt”, to communicate its demands to the victim. It demands $980 in ransom, or $490 if paid within 72 hours after the attack. The note frames it as a discount, however it simply means that the price will double after three days.
This increase in price is designed to manipulate the victims into paying, but you shouldn’t. There are other ways to remove Erqw ransomware and decrypt .erqw files, after all. The guide below lists a few.