How to remove ZeRy ransomware

ZeRy ransom note:

HELLO!


As you can see all your files are encrypted
To get them back, you have to pay me 0.05 bitcoins
At this address: bc1qgfef9nlwffftl6m5qet95yxa0x7arah0h580gs


After you have made the payment, contact me at this email address: zery@tuta.io
with this topic: [REDACTED]


After payment confirmation, you will receive the keys and a tutorial to decrypt your files.


If you don't own bitcoin, you can buy it very easily here:
www.localbitcoins.com
www.paxful.com
www.coinmama.com


You can find a larger list here:
hxxps://bitcoin.org/en/exchanges


If you don't contact me or you won't make the payment in 5 days
I will assume that you do not want to recover your files
and as a result I will delete the keys generated for your PC.

This is the end of the note. Below you will find a guide explaining how to remove ZeRy ransomware.

What is ZeRy ransomware?

ZeRy is a malicious program that falls under the ransomware category. This means that it encrypts the files on the target computer and then demands money for their decryption. Additionally, files affected by this ransomware program get renamed; specifically, they receive .ZeRy file extension. This is how the virus got its name.
ZeRy belongs to the Xorist ransomware family. Many ransomware viruses in this family have ransom notes written in Russian, but ZeRy is not one of them. Its ransom note, written in plain and understandable English, can be read on the image above.
The short version is, the hackers want 0.05 Bitcoin, which is approximately $830 at the time of writing. However, as cryptocurrencies are highly unstable, this may no longer be accurate by the time you’re reading this. They also threaten to delete the decryption keys if not contacted within 5 days after infection.
You should know, however, that contacting these criminals is a risky affair, and paying them is even riskier. You may become a target for future attacks, and they might not even decrypt your files. The guide below will explain what other options you have to remove ZeRy ransomware and decrypt .ZeRy files.

Scroll to top