Nuis Ransomware Removal and Decrypt

Nuis virus (Nuis ransomware). This ransomware is a type of malware that encrypts and locks up your private files (video, photos, documents) 

This type of attack hits your files. Then your file name will be ended with a second extension, so you will not be able to access them.

.nuis ransomware 

It marks the encrypted files By adding its extension to them. For example, "video.mp4” will be named as “video.mp4.nuis”, and also it will put text document (_readme.txt) inside each encrypted folder.

The used technique will have a unique decryption key, and it will be different for each infected computer system.

This needed decryption key is hosted on a server under the criminals full control, who have actually loaded the ransomware into the internet each victim will have unique id, the victim told to contact the attackers to pay the ransom.

There is no warranty that these online Cyber-criminals will keep their promises, so you may lose your money for nothing.

The Web is loaded with ransomwares. It's recommended for you to save a copy for all your essential documents every day/week to an external storage. "USB Flash Drive/external HDD, or the cloud data storage. Keeping the backups on your system drive is not supported.

How .nuis ransomware attacks files?

They use many tricks to phish their victim:

1. By spam e-mails.
2. Some Fake Ads on free hosting websites.
3. Some unsafe torrent software, Opening these types or clicking on the harmful links might harm the system.

How To protect from the .nuis virus Cyber-attack

You'll be safe if you do this:

1. Do not open any e-mail attachments, specifically from unknown sender.
2. Do not install unsafe freeware.
3. Install an antivirus with last update, to check each file before opening it.

How to remove nuis ransomware?

You can remove ransomware from windows 10 & Remove Ransomware from windows 7  with our video tutorial help.

Also, you need to change all your passwords used on the infected device because the nuis ransomware may steal the passwords stored in your browser and send them to the gangs.

How to Decrypt nuis?

Big files restoration| Try to remove .nuis extension from some BIG files then open them. this method depends on virus ability of reading and encrypting the file, so it will not add the file marker. incase each file is larger than 2GB. Please, leave a comment if that will work for you.

Download the free Decrypt tool for STOP/Djvu | Make sure to launch the decryption tool as an administrator. then agree with the license terms by clicking on "yes" button.

After that, the main Emsisoft decryptor interface comes up.

the decryptor will automatically find the available drives, including any connected drives, and for more locations can be selected with the “Add” button.

After adding the needed locations for decryption into the list, click on the “Decrypt” button to start the decryption procedure.

The main screen may turn you to a status view, letting you know of the active process and the decryption statistics of your data.

The decryptor will notify you at the end of the decryption process.

The Emsisoft Decryptor might display different messages while decrypting files:

No key for New Variant online ID| so, the decryption is impossible.

Your original files were encrypted with an online key you run the virus while you are connected to the internet. So no one has the same encryption/decryption key pair. 

Result: No key for new variant offline ID| so, Decryption may be possible in the future. Receiving this message is good news for you, because it might be possible to restore your files in the future, follow updates regarding the decryptable DJVU versions.

Remote name could not be resolved| It refers to DNS problem on your PC, so reset your HOSTS file back to default.

References

What is Ransomware?
How to get rid of Ransomware?.
How to Protect Networks from Ransomware attack?.
 The history of harmful ransomware