Jhon Woddy Ransomware Removal Guide

Jhon Woddy Ransomware is a malicious program that terrorizes innocent users as it tries to make them pay the ransom fee. The program follows the usual path of a ransomware infection, so technically there is nothing unusual about it. The most discouraging part about ransomware programs is that it is usually impossible to revert the affected files back to normal unless you have the decryption key. Nevertheless, it does not mean you should not try and remove Jhon Woddy Ransomware from your system for good. Whenever you are infected with malware, your first task is to delete it as soon as possible.

Ransomware programs manage to enter target systems because users are not careful enough when they browse the web. In fact, Jhon Woddy Ransomware and other similar infections usually employ spam email messages to attack unprotected computers. It means that the installer file for this infection probably looked like some invoice or a document you found in an email message. We would like to point out, that financial institutions and other companies seldom employ attachments to deliver important documents. It should automatically make alarm bells ring in your head. On the other hand, if you think that you must open a particular attachment, you will do yourself a favor if you scan that file with a security tool.

Either way, when Jhon Woddy Ransomware enters your computer, it automatically initiates a full system scan and starts encrypting all the files it can encrypt. Our research suggests that this program can encrypt all picture and document file formats, as well as various .exe, .ini, and .dll files. It would not be too far-fetched to say that after the encryption you would not be able to access most of your important files. Although after the encryption your operating system should still remain functional, research shows that quite a few important programs no longer work as well. That is probably because the ransomware encrypts a number of .exe files, and the system cannot load them anymore.

The program also does not even try to hide itself as it boldly states that it has encrypted your files with the following notice:

All your files, photos, videos have been encrypted.
To decrypt them send 0.3 bitcoins to the address below:
<…>
If you will not do that we will delete your files within 72 hours.
If you don’t have bitcoins you can buy them from localbitcoins.com.

As you can see, Jhon Woddy Ransomware is pretty straightforward about what it wants. The program may try to pose as a Windows update at first, but no one could be fooled with that. Also, you will notice immediately which files have been affected by this infection because the encrypted files will have a new extension added, that says “.FUCKED.”

To close the ransom note, you have to use the Task Manager because the window does not have a “close” button. After that, you need to delete the ransomware installer file that should still be in your Downloads folder. Please note that ransomware files often have random names, so it might be hard to locate them manually. That is why it is strongly recommended to make use of a powerful antispyware tool and remove Jhon Woddy Ransomware automatically.

Once ransomware is removed, you can restore your files from an external system backup. A public decryption key is not available at the moment, so it would be for the best to delete the infected files, and transfer healthy copies back into your computer.

How to Remove Jhon Woddy Ransomware

1. Press Ctrl+Shift+Esc and Task Manager will open.
2. Open the Processes tab and highlight the malicious process.
3. Click End Task and close Task Manager.
4. Go to the Downloads folder.
5. Find the most recently downloaded files and delete them.
6. Scan your PC with SpyHunter.