Djvu is a ransomware that is bundled in with adware and downloaded when you aren’t paying attention.
It will download 4 files.
The first file basically disables Windows Defender and then starts the second file.
The second file loads help web pages (mostly anti-virus sites) as unavailable sites.
Then it will start the third file which will give your computer a unique id and start talking to the server of the hacker.
Finally, the last file will start the encryption of your data.
When this starts, it will show you an old school Windows Update screen, like the one above, so that you think everything is normal.
What should you do if you see this update screen?
Turn your computer off and unplug it. Remove the battery if possible.
The longer you let it run, the more chance it has to encrypt your data!
As always, if we can ever be of assistance, please feel free to give us a call at 603-524-1400, email us at support@samedaycomputers.com, or link up with one of our technicians on live chat at www.samedaycomputers.com!
If you would like to get our newsletters please email us!