Remove Professor Ransomware

The VoidCrypt Ransomware continues to be one of the more active file-locker projects alongside the STOP/Djvu family. One of its latest iterations is called the Professor Ransomware and, unfortunately, it is also impossible to decipher via free tools. If you are a victim of the Professor Ransomware, you may lose access to most of your important files. According to the criminals behind the attack, you will only be able to restore access by paying a hefty ransom fee via Bitcoin. We assure you that trusting ransomware operators is never a good idea, regardless of what they promise you.

The Professor Ransomware attack usually happens when you interact with a malicious file. It might be disguised as a game crack, software activator, or even an email attachment. We advise you to be wary of unknown file downloads, and to always keep your system protected by an up-to-date antivirus tool.

When the Professor Ransomware attacks, it will append the suffix '.[profes0r@tutanota.com][<VICTIM ID>].professor' to all files it locks. It also creates a ransom note called '!INFO.HTA' that sheds some light on the attack, and the victim's recovery options. Instead of trying to strike a deal with the criminals, we would advise you to run an anti-malware tool that will help you eliminate the malware. Once you dispose of the Professor Ransomware, you can experiment with alternative file recovery tools and techniques to restore access to your data.