How to remove Vohuk ransomware

Vohuk ransom note:

[~] Vohuk Ransomware V1.3

>>> What's happened?
ALL YOUR FILES ARE STOLEN AND ENCRYPTED.
To recovery your data and not to allow data leakage, it is possible only through purchase of a private key from us.

>>> What guarantees?
We are not a politically motivated group and we do not need anything other than your money.
Before paying you can send us up to 2 files for free decryption.
The total size of files must be less than 2MB(non archived).
files should not contain valuable information. (databases, backups, large excel sheets, etc.)

>>> CONTACT US:
Please write an email to both: payordiebaby@tutanota.com & payordiebaby69@msgsafe.io
Write this Unique-ID in the title of your message: [REDACTED]

>>> ATTENTION!
Do not delete or rename or modify encrypted files.
Do not try to decrypt using third party software, it may cause permanent data loss.
Decryption of your files with the help of third parties may cause increased price(they add their fee to our).
We use strong encryption, nobody can restore your files except us.
The price depends on how fast you contact with us.
remember to hurry up, as your email address may not be available for very long.
All your stolen data will be loaded into cybercriminal forums/blogs if you do not pay ransom.
If you do not pay the ransom we will attack your company repeatedly again.

This is the end of the note. Below you will find a guide explaining how to remove Vohuk ransomware.

What is Vohuk ransomware?

Vohuk is a malware program more specifically categorized as ransomware. It utilizes cryptographic algorithms to encrypt all user files on the infected computer. These encrypted files cannot be accessed; to view or edit them, decryption is necessary. This is how this virus works, it offers to decrypt the files it encrypted. The hackers demand money for this procedure, of course.
Vohuk, just like every other ransomware program, leaves a ransom note. In this case, it is called “README.txt”. The full text of the note is available on the image above. That said, it doesn’t contain much information at all. The hackers don’t mention the price, only their e-mail addresses.
The virus also renames files while encrypting them. The name of each file is replaced with a string of random characters, while the extension is replaced with .Vohuk file extension.
While contacting the criminals and paying the ransom is an option, it is generally not a good one. Often, they will not decrypt your files even after payment. Instead they will disappear or try to get more money from you. The guide below will explain how to remove Vohuk ransomware and decrypt .Vohuk files without having to deal with the hackers.

Scroll to top