Remove Wuxia Ransomware

Wuxia Ransomware, a variant of the VoidCrypt Ransomware, is a new dangerous malware to be wary of. Its creators are relying on multiple strategies to spread it – fake downloads, pirated content, malicious emails, and even malicious advertisements. To stay safe from such attacks, you should be extra careful when browsing unknown websites. Avoid visiting such pages, and remember never to download files from non-verified sources.

The Wuxia Ransomware's attack is very destructive. This malware scans the contents of all attached hard drives, SSDs, and removable storage devices. It is searching for specific file formats that are likely to be important – archives, databases, documents, media, etc. When it discovers such a file, it encrypts its contents to make them inaccessible. It will also manipulate their names by appending a new extension after the original one – '.(<VICTIM ID>)(Hushange_delbar@outlook.com).wuxia.'

The malware also drops two ransom note files – Decryption-guide.hta and Decryption-guide.txt. Their contents are identical. They tell the victim not to try alternative data recovery tools since this might damage their data permanently. Instead, the malware creators ask their victim to pay a ransom fee by contacting huschange_delbar@outlook.com. Surprisingly, the ransom note advises users to avoid working with negotiators.

If you happen to be one of Wuxia Ransomware's victims, you should not accept to work things out with the criminals. They are likely to demand thousands of dollars, and you will have no guarantee that they will help you in the end. Sending them money will probably get you scammed. Instead, use an antivirus scanner to dispose of the Wuxia Ransomware, and then explore alternative data restoration options.