What is WoodRat Ransomware
WoodRat Ransomware is a cyber threat that belongs to the category of ransomware. WoodRat Ransomware penetrates the user’s PC invisibly and then encrypts the data using a multi-stage algorithm, which makes them inoperable. WoodRat Ransomware shows photos, videos, multimedia, archives, and other types of files that are usually very important to the user. That is why many are ready to do almost anything to save data.
The ransomware was active in early October 2020 and within a few days, the virus spread throughout the world, including Asia, Latin America, and other countries. In addition to encryption, WoodRat Ransomware changes the file extension, assigning the ending .woodrat, after which it is impossible to change the extension yourself. Moreover, the virus creates the LOCKED_README.txt text file containing the requirements of fraudulent developers.
Ooops, all your files are encrypted, that means you can’t use them for a while!!!
They are not perpmanently lost, for there’s a special key to get them back.
You can try all the ways you have to decrypted your files, but it’s just a waste of time,
eventually you will know there’s no other way but to contact us for help.
With our help, you could get your files back within a hour, but you need to follow the instructions below :
[1] Send an email to the addr below :
woodratofficial@outlook.com
[2] with content of :
*1 your “ID” & “BIT KEY” located in “LOCKED_README.txt”
*2 The amount of files encrypted and the finish time(I have ways to figure out the finish time, so think twice)
[3] Then, there’s two choices :
*1 [recommended] pay us immediately, so we’ll help you decrypt as soon as the payment was conformed
*2 wait for our reply(need a lot of time)
* the first method was recommended for you have limited amount of time
* if you’d like to test some files, you can send them to us via mail,but here’s the limtation :
* quantity <= 4 and total file size <= 4mb [*] send xmr to the addr below : 41k9ry6hQUZLJJd9ZEJpPVXNuUVjRNJGkPbroMfXJVf6DsqHfJ6Sro2LHJzr6wuvXwE5kS7c9Azni2F8srmGScU5Fzu9P2C more detail about xmr purchasing, visit https://www.getmonero.org/ or just use search engine for 'buy xmr' if you have future questions, it's welcome to send us a mail! [*] here's the price, notice : you only have limited amount of time =============================================== = encrypted in 1-3 days - 1.5 xmr to get decrypt = = encrypted in 3-7 days - 3 xmr to get decrypt = = encrypted in a month - 10 xmr to get decrypt = = encrypted over a month - never get decrypt = =============================================== *** [text in Chinese] ID : asUrKIhy5jpLJyPdZtdC0g== ========start BIT KEY======== axQBviMKZ7U3qUBllOBekY3AQhZ8+hoLUtoWV++FuVYrq6lmIibwVdjZhR9wPZln+rXBjNHRh *** [total 1372 characters] ========end BIT KEY========
In the note, the cybercriminals indicate the contact information for communication with them, as well as the ransom price from 1.5 to 10 XMR ($165-1000), and the ransom price depends on the speed of payment from the moment of encryption. After a month, they said, it would be impossible to recover the data. Be that as it may, we do not recommend paying you, as there is no guarantee that your files will be returned to you, even if you fully satisfy their requests. Use our recommendations to remove WoodRat Ransomware and decrypt .woodrat files.
Well, there are 2 options for solving this problem. The first is to use an automatic removal utility that will remove the threat and all instances related to it. Moreover, it will save you time. Or you can use the Manual Removal Guide, but you should know that it might be very difficult to remove WoodRat ransomware manually without a specialist’s help.
If for any reason you need to recover deleted or lost files, then check out our article Top 5 Deleted File Recovery Software
WoodRat Removal Guide
Remember that you need to remove WoodRat Ransomware first and foremost to prevent further encryption of your files before the state of your data becomes totally useless. And only after that, you can start recovering your files. Removal must be performed according to the following steps:
- Download WoodRat Removal Tool.
- Remove WoodRat from Windows (7, 8, 8.1, Vista, XP, 10) or Mac OS (Run system in Safe Mode).
- Restore .WoodRat files
- How to protect PC from future infections.
How to remove WoodRat ransomware automatically:
Norton is a powerful antivirus that protects you against malware, spyware, ransomware and other types of Internet threats. Norton is available for Windows, macOS, iOS and Android devices. We recommend you to try it.
If you’re Mac user – use this.
Manual WoodRat ransomware Removal Guide
Here are step-by-step instructions to remove WoodRat from Windows and Mac computers. Follow these steps carefully and remove files and folders belonging to WoodRat. First of all, you need to run the system in a Safe Mode. Then find and remove needed files and folders.
Uninstall WoodRat from Windows or Mac
Here you may find the list of confirmed related to the ransomware files and registry keys. You should delete them in order to remove virus, however it would be easier to do it with our automatic removal tool. The list:
no information
Windows 7/Vista:
- Restart the computer;
- Press Settings button;
- Choose Safe Mode;
- Find programs or files potentially related to WoodRat by using Removal Tool;
- Delete found files;
Windows 8/8.1:
- Restart the computer;
- Press Settings button;
- Choose Safe Mode;
- Find programs or files potentially related to WoodRat by using Removal Tool;
- Delete found files;
Windows 10:
- Restart the computer;
- Press Settings button;
- Choose Safe Mode;
- Find programs or files potentially related to WoodRat by using Removal Tool;
- Delete found files;
Windows XP:
- Restart the computer;
- Press Settings button;
- Choose Safe Mode;
- Find programs or files potentially related to WoodRat by using Removal Tool;
- Delete found files;
Mac OS:
- Restart the computer;
- Press and Hold Shift button, before system will be loaded;
- Release Shift button, when Apple WoodRato appears;
- Find programs or files potentially related to WoodRat by using Removal Tool;
- Delete found files;
How to restore encrypted files
You can try to restore your files with special tools. You may find more detailed info on data recovery software in this article – recovery software. These programs may help you to restore files that were infected and encrypted by ransomware.
Restore data with Stellar Data Recovery
Stellar Data Recovery is able to find and restore different types of encrypted files, including removed emails.
- Download and install Stellar Data Recovery
- Choose drives and folders with your data, then press Scan.
- Select all the files in a folder, then click on Restore button.
- Manage export location. That’s it!
Restore encrypted files using Recuva
There is an alternative program, that may help you to recover files – Recuva.
- Run the Recuva;
- Follow instructions and wait until scan process ends;
- Find needed files, select them and Press Recover button;
How to prevent ransomware infection?
It is always rewarding to prevent ransomware infection because of the consequences it may bring. There are a lot of difficulties in resolving issues with encoders viruses, that’s why it is very vital to keep a proper and reliable anti-ransomware software on your computer. In case you don’t have any, here you may find some of the best offers in order to protect your PC from disastrous viruses.
Malwarebytes
SpyHunter is a reliable antimalware removal tool application, that is able to protect your PC and prevent the infection from the start. The program is designed to be user-friendly and multi-functional.