Skip to content
  • Active
  • Severity: High
  • Ransomware
  • Windows
  • Verified · May 2018

How to remove Robin Hood And Family ransomware

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Linas Kiguolis · Expert in social media

Robin Hood and Family virus is malware that deletes your files instead of encrypting them

Robin Hood And Family ransomware virus

Robin Hood and Family is somewhat unusual ransomware because of the activity with files. Ransomware type viruses, in most cases, encrypts data and then asks for a ransom from victims. However, this one deletes files and displays threatening message about lost documents, pictures, and other essential data.

Summary
Name Robin Hood and Family
Type Ransomware
Danger level High. Can make system changes, install malicious  components and delete files on the system
Ransom note YOU ARE HACKED- READ ME.TXT
Size of the ransom 0.1 Bitcoins
Symptoms Deleted files from the computer, an appearance of the ransom note, system crashes, and displays errors
Data recovery Third-party tools might help to restore files, but chances are not high
Distribution Spam emails, malicious downloads or updates
To uninstall Robin Hood and Family, install FortectIntego and run a full system scan

Robin Hood and Family ransomware deletes files from your computer and after that places “YOU ARE HACKED- READ ME.TXT” file on the desktop with the following ransom message:

You are hacked! In the past few hours, days, weeks or even months (who knows how long) we have backed up all data from your computer. After that, well, we permanently deleted all your files. And no, you can't restore data from recycle bin.

As you can see, the ransom note states that the files are deleted but they have backups on the remote server and the only way to get the access to that is paying the ransom. The ransom for Robin Hood and Family ransomware is 0.1 Bitcoin, and the ransom message has all the steps they advise you to do.

After making the payment, victims of Robin Hood and Family virus are asked to send their identification code to robinhoodxxx007@tutanota.com after transferring the money. Supposedly, they can receive the key for data restoration. However, there're no guarantees that crooks actually have your files backed up and are willing to give them back.

It’s highly possible that cybercriminals would ignore the victim after the payment. The purpose of Robin Hood and Family virus is to swindle the money from computer users. Therefore, if your computer or laptop was hit by this malware, you should proceed with virus ransomware removal instead of trying to recover files.

Robin Hood and Family removal requires scanning the system with FortectIntego or another malware removal software.[1] Virus elimination won’t restore missing files. However, this step is crucial for keeping the system safe.

However, once you remove Robin Hood and Family ransomware virus, you can try tools like Data Recovery Pro or ShadowExplorer for data recovery. The latter tool might help if malware did not delete Shadow Volume Copies[2] of the targeted data. Keep in mind that even the most dangerous cyber threats can fail to complete this step. Hence, there’s still a chance to recover your files even if you do not have backups.

Robin Hood And Family ransomware example

The computer can be infected through suspicious email attachments

In the era of ransomware viruses, you kneed to know that opening spam emails are dangerous and not needed. Especially when there is something attached to it. Delete those questionable emails as soon as you spot them in your mailbox.

Specialists from zondervirus.nl[3] provide instructions on how to check if the email and attachment are infected:

  • these letters include lots of grammar and spelling mistakes,
  • the message lacks credentials (e.g., company logo, email design, unusual signature),
  • the email sent from suspicious address,
  • the sender does not work on the organization from which the letter should be sent (yes, you should look up for the
  • information about the sender online!);
  • the body of the email urges to open the attached document immediately.

Also, pay close attention when browsing the internet. There might be fake advertisements and software updater suggestions. Always download and install software from legitimate websites, stores and use Advanced installation settings.

You can and should remove Robin Hood and Family from your computer now

Although deleted data is most likely not reversible, you can remove Robin Hood and Family virus from your computer using professional tools. We can recommend FortectIntego, SpyHunterCombo Cleaner, and MalwarebytesMalwarebytes for this job and further system scan. You can avoid malware from infiltrating later on, but you need to remove everything that already exists on your computer to be safe.

There is a guide for Robin Hood and Family removal below that can help you to proceed with this procedure and have your computer back to safety. Additionally, you can find additional tools that might help to retrieve some of the deleted files too.

Be the first to comment

Spyware news
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.