Eiur Ransomware

The Eiur Ransomware, another member of the prolific STOP/Djvu Ransomware family, is one more threat that is aimed at the encryption of crucial files stored on the targeted machine. To make it impossible for the computer users to access their data, the Eiur Ransomware uses a strong encryption method that only can be broken with a decryption tool that the people behind the attack possess. Therefore, if the victims want to access their data again, they will need to pay a ransom to get the necessary tool.

Like all members of the STOP/Djvu family, the Eiur Ransomware changes the names of the encrypted files by adding the file extension '.eiur' at the end of their names. The next step of the Eiur Ransomware is to display its ransom demanding message in a text file named '_readme.txt,' which promises the victims to provide the decryption key as soon as the ransom is paid. The demanded ransom is $980. However, the victims can pay half of this amount, $490, if they contact the attackers in the first 72 hours following the attack. Victims also can send one file to be decrypted for free as proof that their data can be recovered.

The ransom message exhibited by the Eiur Ransomware reads:

'ATTENTION!
Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
hxxps://we.tl/t-5JlAL7HXIu
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.
To get this software you need write on our e-mail:
support@bestyourmail.ch
Reserve e-mail address to contact us:
supportsys@airmail.cc
Your personal ID:
{random-44-character-alphanumeric-id}'

However, the email addresses support@bestyourmail.ch and supportsys@airmail.cc, as well as the payment of a ransom should be avoided because interacting with criminals is not a recommended solution. Instead, victims should look for alternative ways to recover their data and not forget to remove the threat from the infected PC.