EFJI Ransomware Encrypted File
2.0 | 1 Vote
What is an EFJI file?
In October 2020, some users reported their computers had been infected by EFJI ransomware. This ransomware is a variant of the popular .STOP family of ransomware.
Just like other STOP variants, EFJI ransomware encrypts a user's files (to prevent the user from opening them) and renames the files it encrypts. It then produces a plain text ransom note named _readme.txt in every folder that contains an infected file. This ransom note contains instructions users can supposedly follow to restore their files.
How did my computer get infected by EFJI ransomware?
EFJI ransomware is most commonly distributed within programs that appear to be legitimate but are actually adware and malware bundles. If you recently downloaded and installed an unverified program, that may be how your computer became infected by EFJI ransomware.
How to open an EFJI file
Because EFJI files are encrypted, you cannot open them. At this time, there is no way to decrypt EFJI files. The best way to restore files encrypted by EFJI ransomware is to retrieve them from a recent backup or perform a System Restore.
FileInfo.com recommends you never pay a ransom to decrypt files encrypted by ransomware. Paying a ransom encourages ransomware distributors to continue their efforts, and there is no guarantee that paying a ransom will give you access to your files. Instead, you should restore your data from a recent backup created before the ransomware infected your computer.