Eu Ransomware Contains Decryption Hints

Eu ransomware is a strange new strain of file-encrypting malware. The new variant does not belong to any big family.

Eu encrypts all files on the system, like most ransomware variants do, appending the ".eu" extension to encrypted files. This will turn the file "Notepad.exe" into "Notepad.exe.eu". Affected files include media, document, archive, executable and database file types.

The ransom note is generated and deposited on the desktop, inside a file named "read_instruction.txt", and the system wallpaper is changed too.

This is where things start getting a bit strange. The wallpaper contains the following text in broken English:

Sorry, you can't unlock your all files
But why you download this virus?
Why bro, everyone who open this file can't get decryptor, so why you open this?
Read instruction, maybe you find decryptor 🙂

~ Union Europe

This is accompanies by the plain text file that reads as follows:

Don't worry, you can return all your files!

All your files like documents, photos, databases and other important are encrypted to .eu

If you want decrypt your all files for FREE follow the tutorial

- 1. Find my virus process name in TASKMANAGER and kill the process
- 2. Find in your windows registry ( LOCALMACHINE > OUTPUT > LOCALHOST > EUCRYPT ) if you cant find this just type in CMD /taskkill /F (kill my virus 🙂 )
- 3. Restart yours computer and find folder with 'my virus name, i mean not this name but my virus 🙂 ' and open this decryptor VIA admin and wait for DECRYPT all files , you can wait MAX 1 HOUR

But if you still dont like remove my virus manually contact me on this email - dupex876@gmail.com

~ EU

There is no guarantee than the instructions for possible decryption will work on every system, or even if they work at all.