How to remove Tuow ransomware

What is Tuow ransomware?

Tuow is a ransomware program – a program that encrypts your files and demands payment for their decryption. Encrypted files cannot be accessed in any way, so it’s kind of like having your files stolen and paying to get them back. This is why this type of viruses is called ransomware.
Tuow is a part of the STOP/Djvu ransomware family – a group of viruses similar to each other. Though in many cases these similarities are subtle and can be noticed only by cybersecurity researchers, all STOP/Djvu viruses are nearly identical. You can check out another such virus, Tuis, to see for yourself.
When encrypting files, Tuow also renames them; specifically, “.tuow” is added to the end of the file. This effectively gives all encrypted files .tuow file extension.
The virus also leaves a ransom note, a text file named “_readme.txt”. In this note, the hackers mention their contact information, as well as the price. As is always the case with STOP/Djvu ransomware, decryption costs $980, though the victim is offered a 50% discount if they pay within 3 days of infection. The full note can be read on the image above.
Paying the hackers is a bad idea, because nothing is stopping them from ignoring you once you’ve paid. Indeed, such incidents are very common. We have prepared a guide that will explain how to remove Tuow ransomware and decrypt .tuow files without any contact with the criminals.

Scroll to top