Robin Hood and Family virus is malware that deletes your files instead of encrypting them

Robin Hood and Family is somewhat unusual ransomware because of the activity with files. Ransomware type viruses, in most cases, encrypts data and then asks for a ransom from victims. However, this one deletes files and displays threatening message about lost documents, pictures, and other essential data.
| Summary | |
|---|---|
| Name | Robin Hood and Family |
| Type | Ransomware |
| Danger level | High. Can make system changes, install malicious components and delete files on the system |
| Ransom note | YOU ARE HACKED- READ ME.TXT |
| Size of the ransom | 0.1 Bitcoins |
| Symptoms | Deleted files from the computer, an appearance of the ransom note, system crashes, and displays errors |
| Data recovery | Third-party tools might help to restore files, but chances are not high |
| Distribution | Spam emails, malicious downloads or updates |
| To uninstall Robin Hood and Family, install FortectIntego and run a full system scan | |
Robin Hood and Family ransomware deletes files from your computer and after that places “YOU ARE HACKED- READ ME.TXT” file on the desktop with the following ransom message:
You are hacked! In the past few hours, days, weeks or even months (who knows how long) we have backed up all data from your computer. After that, well, we permanently deleted all your files. And no, you can't restore data from recycle bin.
As you can see, the ransom note states that the files are deleted but they have backups on the remote server and the only way to get the access to that is paying the ransom. The ransom for Robin Hood and Family ransomware is 0.1 Bitcoin, and the ransom message has all the steps they advise you to do.
After making the payment, victims of Robin Hood and Family virus are asked to send their identification code to robinhoodxxx007@tutanota.com after transferring the money. Supposedly, they can receive the key for data restoration. However, there're no guarantees that crooks actually have your files backed up and are willing to give them back.
It’s highly possible that cybercriminals would ignore the victim after the payment. The purpose of Robin Hood and Family virus is to swindle the money from computer users. Therefore, if your computer or laptop was hit by this malware, you should proceed with virus ransomware removal instead of trying to recover files.
Robin Hood and Family removal requires scanning the system with FortectIntego or another malware removal software.[1] Virus elimination won’t restore missing files. However, this step is crucial for keeping the system safe.
However, once you remove Robin Hood and Family ransomware virus, you can try tools like Data Recovery Pro or ShadowExplorer for data recovery. The latter tool might help if malware did not delete Shadow Volume Copies[2] of the targeted data. Keep in mind that even the most dangerous cyber threats can fail to complete this step. Hence, there’s still a chance to recover your files even if you do not have backups.

The computer can be infected through suspicious email attachments
In the era of ransomware viruses, you kneed to know that opening spam emails are dangerous and not needed. Especially when there is something attached to it. Delete those questionable emails as soon as you spot them in your mailbox.
Specialists from zondervirus.nl[3] provide instructions on how to check if the email and attachment are infected:
- these letters include lots of grammar and spelling mistakes,
- the message lacks credentials (e.g., company logo, email design, unusual signature),
- the email sent from suspicious address,
- the sender does not work on the organization from which the letter should be sent (yes, you should look up for the
- information about the sender online!);
- the body of the email urges to open the attached document immediately.
Also, pay close attention when browsing the internet. There might be fake advertisements and software updater suggestions. Always download and install software from legitimate websites, stores and use Advanced installation settings.
You can and should remove Robin Hood and Family from your computer now
Although deleted data is most likely not reversible, you can remove Robin Hood and Family virus from your computer using professional tools. We can recommend FortectIntego, SpyHunterCombo Cleaner, and MalwarebytesMalwarebytes for this job and further system scan. You can avoid malware from infiltrating later on, but you need to remove everything that already exists on your computer to be safe.
There is a guide for Robin Hood and Family removal below that can help you to proceed with this procedure and have your computer back to safety. Additionally, you can find additional tools that might help to retrieve some of the deleted files too.
Was this guide helpful?
Be the first to comment