Ramp Ransomware 🔐 (. Terror_Ramp3 File) — Removal Guide

What is Ramp virus?

Ramp will append its extra .terror_ramp3 extension to every file’s title. For example, an image named “photo.jpg” will be changed to “photo.jpg.terror_ramp3”. Just like the Excel file with the name “table.xlsx” will be renamed to “table.xlsx.terror_ramp3”, and so on.

In every folder with the encrypted files, a ramp3.txt text document will be created. It is a ransom money memo. Therein you can find information on the ways of contacting the racketeers and some other remarks. The ransom note usually contains a description of how to purchase the decryption tool from the Ramp developers. That is it.

In the picture below, you can see what a directory with files encrypted by the Ramp looks like. Each filename has the “.terror_ramp3” extension appended to it.

How did my machine catch Ramp ransomware?

Nowadays, there are three most popular ways for malefactors to have ransomware acting in your system. These are email spam, Trojan injection and peer-to-peer networks.

If you open your inbox and see emails that look like familiar notifications from utility services providers, postal agencies like FedEx, Internet providers, and whatnot, but whose mailer is unknown to you, be wary of opening those emails. They are very likely to have a malware item attached to them. So it is even riskier to download any attachments that come with letters like these.

Another option for ransom hunters is a Trojan horse model². A Trojan is a program that infiltrates into your machine pretending to be something legal. For example, you download an installer of some program you need or an update for some program. However, what is unboxed turns out to be a harmful agent that corrupts your data. As the installation package can have any name and any icon, you have to make sure that you can trust the source of the stuff you’re downloading. The best thing is to use the software developers’ official websites.

As for the peer-to-peer file transfer protocols like torrent trackers or eMule, the danger is that they are even more trust-based than the rest of the Web. You can never know what you download until you get it. So you’d better be using trustworthy resources. Also, it is a good idea to scan the folder containing the downloaded objects with the anti-malware utility as soon as the downloading is finished.