How to Remove Horsemagyar Ransomware

Horsemagyar is the unusual name of a newly discovered strain of file-encrypting malware. There is no indication that the ransomware belongs to any of the major groups or families of ransomware.

Horsemagyar would encrypt most non-essential files on the victim's system, then produce a ransom note. The encryption process makes files unreadable like you would expect with ransomware.

Encrypted files are recognizable by their changed names and extension. An encrypted file would keep its original name and extension but receive the appendix ".[victim ID string].[spanielearslook].likeoldboobs".

This means that a file formerly called "mountain.jpg" will transform into "mountain.jpg.[victim ID string].[spanielearslook].likeoldboobs". The extension chosen for encrypted files is as puzzling as the name of the ransomware, as "Magyar" simply means "Hungarian" in the Hungarian language.

As with just about every ransomware strain, you can never be sure that the hackers will send you a working decryption tool. The best way to deal with ransomware attacks remains to keep an offline backup of essential files, so you can restore from it.