Uyjh Virus

7-day Free Trial w/Credit card, no charge upfront or if you cancel up to 2 days before expiration; Subscription price varies per region w/ auto renewal unless you timely cancel; notification before you are billed; 30-day money-back guarantee; Read full terms and more information about free remover.

*Uyjh is a variant of Stop/DJVU. Source of claim SH can remove it.


Uyjh is a stealthy file-encrypting infection of the Ransomware kind. Uyjh can sneak inside your system without being detected, and lock your personal files.

The Uyjh ransomware will leave a _readme.txt file with instructions

Such Ransomware file encryption viruses like Voom, Udla are currently some of the most problematic computer threats. The worst aspect about them is that it may not always be possible to release the documents they have encrypted no matter what you do. Yet, the Ransomware victims should try to do their best in such a scenario, and seek the right instructions that can potentially help them minimize the damage.

Our focus in this particular post will be on a cryptovirus named Uyjh, which is a new Ransomware infection that is rapidly increasing its number of infected computers. Our objective here will be to provide readers like you with essential, and helpful information about the virus, including how it operates, what its distribution channels are, and what one can do to remove it. For this, we have prepared a set of removal guidelines that may help those of you who already have Uyjh in their system remove the malware, and potentially get some of their files back without paying the ransom. Our readers could check out the alternative file-recovery methods listed in the removal guide’s section down below, and give them a try once the cryptovirus has been successfully removed from their system.

The Uyjh Virus

The Uyjh virus is a malware piece that should be removed from the system with caution. If the Uyjh virus is present, and active on your computer, you may not be able to use the machine normally, and store data on it.

Uyjh virus
The Uyjh virus will encrypt your files

Of course, the hackers behind the infection will offer to give their victims a special decryption key, that can bring all the files back to normal, but only in exchange for a ransom payment. The amount of the ransom usually varies, and in some cases it may range from a few hundred bucks to a few thousand. However, paying the money may not be a good solution due to the possibility that even after paying the required ransom, the promised decryption key may not be available. If such a key even exists, the crooks may simply not send it to you, or they may ask for more money once you’ve agreed on the payment the first time. That’s why we’d advise our readers to go for the alternative approach – remove the infection with the help of our guidelines, and then try some of the possible options for file recovery.

The Uyjh file encryption

The Uyjh file encryption is a process that is used to locks all files of the victim. The Uyjh file encryption makes the affected data inaccessible to anyone who attempts to open it without the corresponding decryption key.

We’re not going to lie to you – it may not always be possible to recover the encrypted files without the correct decryption key held by the hackers, especially if the virus is a fairly new one like Uyjh. Nevertheless, you can explore some of the possible alternatives you will discover on our site. Depending on the particular scenario, they may, or may not prove effective, but one thing is for sure – it will cost you nothing to give them a try.


Danger LevelHigh (Ransomware is by far the worst threat you can encounter)
Data Recovery ToolNot Available
Detection Tool

*Uyjh is a variant of Stop/DJVU. Source of claim SH can remove it.

Remove Uyjh Ransomware


Dealing with a ransomware infection can be a challenging task, thus, we recommend you to reboot the infected computer in Safe Mode before proceeding with the next steps in this guide. This will allow you to spot any unusual processes and apps more easily and remove them without wasting time. If you’d want step-by-step directions on how to do that, please visit this URL.

If you want to come back to this removal guide after rebooting the system in Safe Mode, make sure that save the page in your browser’s favorites as a bookmark.



*Uyjh is a variant of Stop/DJVU. Source of claim SH can remove it.

A typical ransomware infection starts running a number of harmful processes on your system before you know it. That’s why, to remove Uyjh, you need to identify the malicious processes and stop them.

It’s easy to do so if you press the Ctrl, Shift, and ESC keys simultaneously on your keyboard. Then, go to the Processes tab in the Windows Task Manager and look through the list of running processes. If you isolate a potentially harmful process, right-click on it and select Open File Location.


You can then use the free virus scanner provided below to check for any malware in the files linked with that process:

Each file will be scanned with up to 64 antivirus programs to ensure maximum accuracy
This scanner is free and will always remain free for our website's users.
This file is not matched with any known malware in the database. You can either do a full real-time scan of the file or skip it to upload a new file. Doing a full scan with 64 antivirus programs can take up to 3-4 minutes per file.
Drag and Drop File Here To Scan
Drag and Drop File Here To Scan
Analyzing 0 s
Each file will be scanned with up to 64 antivirus programs to ensure maximum accuracy
    This scanner is based on VirusTotal's API. By submitting data to it, you agree to their Terms of Service and Privacy Policy, and to the sharing of your sample submission with the security community. Please do not submit files with personal information if you do not want them to be shared.

    Stopping the associated process in Task Manager is required before trying to remove any harmful files found by the scanner. To do so, select “End Process” from the quick menu that appears when you right-click on the process. After you end the process, find the location of the dangerous files and delete them.


    Changes in the system’s Hosts file are typical when the computer is compromised with malware. To check for such changes, open your Hosts file and look for any unusual IP addresses under Localhost in the text.

    You can open the Hosts file by hitting the Windows Key and R key on your keyboard at the same time and then pasting the following command in the Run box:

    notepad %windir%/system32/Drivers/etc/hosts

    Click OK and you should see a file looking like this on the screen:

    hosts_opt (1)

    If you see any IP addresses that look questionable, please let us know in the comments section below this post. As soon as the IP addresses are checked, you will receive a response from a member of our team with advice on what to do.

    Next, type msconfig in the Windows search field (which is usually found in the Start menu) and press Enter.

    The screen will show the System Configuration window. On the Startup tab, make sure to uncheck any items marked with a checkmark that Uyjh has added to the list.


    *Uyjh is a variant of Stop/DJVU. Source of claim SH can remove it.

    Dangerous files may frequently be found in your computer’s Registry if a ransomware infestation has compromised it. For this reason, scanning the Registry for malicious files and deleting any that are identified is a crucial step in removing the infection.

    To do so, type Regedit in the Windows search field and press Enter. This will start up the Registry Editor application on your computer. You can open the Editor’s Find dialog box by hitting Ctrl and F at the same time. Then, enter the name of the malware in it. You should click the Find Next button to search for records with that name. After that, only the ransomware-related files should be removed with caution.

    Attention! An inexperienced user can do a lot of damage to the system if they don’t know which registry files to delete. In order to avoid this, a professional anti-malware tool should be used to remove malware and potentially dangerous files from the system and the registry.

    The following five locations on your computer can be manually checked for possibly hazardous files after you have verified that the registry is free from ransomware-related entries. In order to open each of them, type them into the Windows search field and then press Enter.

    1. %AppData%
    2. %LocalAppData%
    3. %ProgramData%
    4. %WinDir%
    5. %Temp%

    If you see any new files or subfolders with unusual names in each of the locations, you should research them more online and quickly get rid of anything that doesn’t seem right. To eliminate any malware-created temporary files from the system, select and delete all the temporary files that have been saved in Temp.


    How to Decrypt Uyjh files

    Ransomware victims may have a difficult time regaining access to their files, as this process may necessitate the use of a range of tools and alternative solutions. The first step you should take if you’ve been attacked, however, is to determine which ransomware variant has encrypted your data. It’s possible to find this out by looking at the file extensions added to the encrypted files.

    New Djvu Ransomware

    Stop Djvu, a new Djvu ransomware variant, is wreaking havoc all over the world by infecting whatever systems it can find vulnerable. The.Uyjh extension is added to the end of the filenames of all files encrypted by this malware. The good news is that, at the time of this writing, STOP Djvu files encoded using an offline key can be decrypted with the help of the decryption application, the link to which you can find below:

    You can download the decryption tool by clicking on the “Download” button located in the upper right corner of the page. STOPDjvu.exe will begin downloading to your computer as soon as you click the button.

    You can open the file if you select “run as administrator” and then press the Yes button. After reading the license agreement and the brief instructions on how to use the program, the decryption process can be started by clicking on the Decrypt button. Keep in mind that this decryptor does not support files encrypted with unknown offline keys or online encryption, so if your files cannot be decrypted, this may be the cause.

    The success of your file recovery also depends on successfully you have removed the ransomware from the infected computer. This being said, it is possible to remove Uyjh and other malware from your computer with the help of a professional anti-virus tool or a powerful free online virus scanner like those that you can find on this page. Let us know in the comments area if you have any queries or troubles while following this instructions! 


    About the author


    Lidia Howler

    Lidia is a web content creator with years of experience in the cyber-security sector. She helps readers with articles on malware removal and online security. Her strive for simplicity and well-researched information provides users with easy-to-follow It-related tips and step-by-step tutorials.

    Leave a Comment

    We are here to help! Use SpyHunter to remove malware in under 15 minutes.

    Not Your OS? Download for Windows® and Mac®.

    * See Free Trial offer details and alternative Free offer here.

    ** SpyHunter Pro receives additional removal definitions and manual fixes through its HelpDesk in cases where they are needed.

    Spyware Helpdesk 1