How to remove Zyka ransomware virus

Something new in the ransomware world – Zyka virus

Zyka ransomware virus is a new file-encrypting virus that targets the most popular computer users’ files. This new ransomware may be lurking on every dark and shady corner of the Internet. Hence, if you don’t be careful, it may sneak inside your computer and cause lots of damage. After infiltration, malware scans computer’s system looking for the targeted files. It is designed to encrypt videos, pictures, documents, databases, backups, configuration files, and others: .7z, .bmp, .doc, .docm, .docx, .html, .jpeg, .jpg, .mp3, .mp4, .pdf, .php, .ppt, .pptx, .rar, .rtf, .sql, .tiff, .txt, .xls, .xlsx, .zip. Zyka virus uses AES^[1] algorithm and encrypts victims’ files with a unique public key^[2] and appends .locked file extension to each encrypted file. Meanwhile, data decryption requires having a private key which is safely placed on the secret hackers’ servers. Of course, they will gladly offer to purchase this key; however, this trade may not be favorable for the victims. When dealing with ransomware^[3], we always recommend sacrificing the files and eliminating the virus. Some alternative data recovery methods and tools may help to restore some of the corrupted files for free. Though, this virus seems to delete Shadow Volume Copies of the targeted files by utilizing the command →vssadmin.exe delete shadows /all /Quiet. For this reason, data recovery may be complicated, but we believe it’s better to risk your files than your money. After Zyka removal, try our suggested data recovery options below.

When all targeted files are successfully encrypted, ransomware leaves a ransom note written in English. The background includes a picture of Guy Fawkes’ mask^[4], which we have seen in many other ransom notes. The content of the message is also similar to other ransomware requirements. After explaining why victims cannot access their files, creators of Zyka ransomware informs that they have to pay 170 USD or 170 EUR within 72 hours for the private decryption key. Hackers demand to transfer the ransom in Bitcoins and promises that as soon as the transaction is made, people can automatically decrypt their files. For those computer users who does not have data backups, it may seem like the only option to rescue their memories, audio collection or important documents. However, you should estimate whether your files are actually worth taking the risk and transferring almost 200 dollars. Bear in mind that cyber criminals may not provide you the key but they use your money for developing other illegal projects. If you do not willing to be a sponsor for the cyber crimes, remove Zyka from the PC with the help of FortectIntego.

What channels are used for the distribution of the ransomware?

Apart from classic dissemination methods – malicious spam email attachments and malvertising^[5] – authors of the Zyka ransomware also use social media and file-sharing networks for the distribution. The payload file may be hidden in the bogus software or updates as well. Therefore, you should be extremely careful when surfing the Web. Always chose reliable sources for new software installation and install them using Advanced/Custom setup only. Do not rely on ads and pop-ups warning about poor computer’s performance or necessity to update particular programs. Ads like these often include malware. Zyka malware may also be included in the safely-looking Word, PDF or ZIP archive sent via email. Hence, before opening any email attachment, make sure you can trust the sender.

Getting rid of Zyka virus

Zyka removal requires scanning the computer with professional malware removal software such as FortectIntego, MalwarebytesMalwarebytes or SpyHunterCombo Cleaner. Of course, you can rely on any other reputable program, but make sure you use a powerful and updated tool. Sometimes ransomware-type viruses prevent victims from automatic elimination. So, in order to scan the system, you may need to reboot your PC to the Safe Mode with Networking, and then run your chosen security tool. Don’t forget that it’s not enough to remove Zyka to recover your files. Our suggestions for data recovery are presented below.