What is Kcvp ransomware?
Kcvp is a novel strain of STOP/Djvu ransomware. More than a thousand strains exist, and most of them are nearly identical to each other. After encrypting the files, all STOP/Djvu strains add a four-letter extension to their names; in this case, .kcvp file extension. The strains are named after these extensions, as it is the easiest way to distinguish them. Although even these names are often similar; for example Tcvp is an another recent version of STOP/Djvu.
After this, the ransomware creates a ransom note. The note, named “_readme.txt”, always contains the same text, though the hackers’ contact information might differ. The virus demands $980 to decrypt the files, and offers a 50% discount to those who pay within 3 days as a manipulative trick. Full text of the note is available on the image above.
Almost a thousand dollars is quite a lot of money. It’s likely that you don’t want to pay that much to restore your files. With that in mind, we’ve prepared a guide explaining alternative ways to remove Kcvp ransomware and decrypt .kcvp files, those that don’t involve paying the hackers.