What is Chekyshka Ransomware?
Chekyshka Ransomware is a new cryptolocker from Russian hackers that affects users’ files making them unavailable. The infected files become useless unless they are decrypted. To do this, cybercriminals offer to purchase decryption tool for which you have to pay $1200 in bitcoins. The payment takes place at the partner’s website and via Tor browser. This way provides complete anonymity of the cybercriminals. Still, if you are infected with this ransomware, let us warn you – do not spend any money on ransom, there are a lot of reports that cybercriminals just ignore their victims after payment. Instead, you may try using this guide to remove Chekyshka Ransomware and decrypt .chekyshka files without spending any money.
The workflow of the ransomware-type viruses is always the same – to encrypt files and then to require payment. After encryption, all infected files will be appended with .chekyshka extension. For example, file “myfamily.jpg” will turn into “myfamily.jpg.chekyshka”. Upon the completion, it leaves !!!CHEKYSHKA_DECRYPT_README.TXT file which contains following information:
All your files have been encrypted.
Your unique id: A0244D50B9034A419856CADBEE5DF40D
You can buy decryption for 1200$ in Bitcoins.
But before you pay, you can make sure that we can really decrypt any of your files.
The encryption key and ID are unique to your computer, so you are guaranteed to be able to return your files.
To do this:
1) Download and install Tor Browser ( https://www.torproject.org/download/ )
2) Open the y7c5bdswtvcfbb2c6waotudyrwhvetxt5xzdkq5hyxnd7clpc3dernqd.onion web page in the Tor Browser and follow the instructions.
Although Chekyshka is a really dangerous virus, you still have a good chance to get them back. Before deciphering, you should first stay focused on removing Chekyshka Ransomware to avoid re-infection. Once Chekyshka Ransomware is removed, you can proceed with decryption. Both automatic and manual solution is presented here that we hope will help you remove Chekyshka Ransomware and recover your files.
How to remove Chekyshka ransomware?
To make sure that the ransomware won’t reappear, you need to delete Chekyshka ransomware completely. For this, you need to remove the files and registry entries of the ransomware. We should warn you that performing some of the steps may require above-average skills, so if you don’t feel experienced enough, you may apply to the automatic removal tool.
Performing an antimalware scan with Norton would automatically search out and delete all elements related to Chekyshka ransomware. It is not only the easiest way to eliminate Chekyshka ransomware but also the safest and the most assuring one.
How to decrypt .chekyshka files
Restore files with Stellar Data Recovery
Stellar Data Recovery is an essential tool in the fight against ransomware-type viruses that can recover encrypted files.
- Download Stellar Data Recovery and launch it
- Select the drive you want to recover and click START SCAN
- After scanning is finished, you are presented with a list of recoverable files found.
- Select the required files and click the Recover
If the above-mentioned mChekyshkaods didn’t help in eliminating the threat, then it’s better to rely on an automatic way of deleting Chekyshka Ransomware.
How to prevent ransomware infection
To prevent infection with ransomware-type viruses, you should have proper antimalware software. This method is convenient because it allows you to detect a virus before its infiltration, and therefore to avoid the loss of all your data. It is capable of protecting not only home computers but also server systems in large organizations. Download antimalware program to secure your system and privacy.
