What is Tuis ransomware?
Tuis is a ransomware program – a virus designed to extort money by holding the victim’s data hostage. It belongs to the STOP/Djvu ransomware family. Generally speaking, all viruses in a family are similar to an extent since they share most of the code. This is especially pronounced in this case, as STOP/Djvu viruses are nearly identical. Tohj is an another STOP/Djvu strain; you may compare them to see the similarity for yourself.
Still, these theoretical details seldom help those who have fallen victim to Tuis or another ransomware. So here are some hard facts. When Tuis encrypts files, all of them are given .tuis file extension. This is useful since it allows you to know what ransomware you’re dealing with. Another way to make sure you’re indeed dealing with Tuis is to check its ransom note, called “_readme.txt” (shown on the image above). Although all STOP/Djvu notes are the pretty much the same, the hackers’ contact information is not.
The criminals demand $980 or $490, depending on how quickly you pay, but it’s likely they will not decrypt your files even after receiving the payment. The guide below will show you how to remove Tuis ransomware and decrypt .tuis files for free. Some files may not be recoverable, but it’s still better than putting your trust in a criminal.