Zxcvb Virus 🔐 (. Zxcvb Files) — How to Remove?

Zxcvb virus: what is known so far?

The scheme of renaming is this: id-xxxxxx.[contact_email].zxcvb. During the encryption, a file entitled, for instance, “report.docx” will be turned into “report.docx.id-9ECFA84E.[].zxcvb”.

In every folder with the encrypted files, a FILES ENCRYPTED.txt file will appear. It is a ransom money note. Therein you can find information about the ways of paying the ransom and some other remarks. The ransom note most probably contains a description of how to purchase the decryption tool from the racketeers. You can obtain this decoding tool after contacting via email. That is pretty much the scheme of the malefaction.

The FILES ENCRYPTED.txt document accompanying the Zxcvb ransomware states the following:

all your data has been locked us
You want to return?
write email  or 

In the picture below, you can see what a directory with files encrypted by the Zxcvb looks like. Each filename has the “.zxcvb” extension added to it.

How did my computer get infected with Zxcvb ransomware?

Nowadays, there are three most popular ways for evil-doers to have the Zxcvb virus planted in your digital environment. These are email spam, Trojan infiltration and peer-to-peer file transfer.

If you open your mailbox and see emails that look like familiar notifications from utility services companies, delivery agencies like FedEx, Internet providers, and whatnot, but whose “from” field is unknown to you, beware of opening those emails. They are very likely to have a malicious file enclosed in them. Therefore, it is even riskier to download any attachments that come with letters like these.

Another thing the hackers might try is a Trojan horse model³. A Trojan is an object that infiltrates into your machine pretending to be something different. For instance, you download an installer for some program you want or an update for some service. But what is unboxed reveals itself a harmful agent that corrupts your data. As the installation wizard can have any name and any icon, you’d better be sure that you can trust the source of the files you’re downloading. The optimal way is to trust the software companies’ official websites.

As for the peer networks like BitTorrent or eMule, the threat is that they are even more trust-based than the rest of the Web. You can never guess what you download until you get it. So you’d better be using trustworthy websites. Also, it is a good idea to scan the folder containing the downloaded objects with the anti-malware utility as soon as the downloading is done.