How to remove KODG ransomware and decrypt .kodg files

KODG ransomware encryption process.

Every day users face different internet threats, that can even ruin a life. The one of the most malicious threats is KODG ransomware. This virus is a part of STOP(DJVU) file-encryption ransomware family. This family includes a great amount of members, such as: MBED, PEET, GROD, MOSK, TOEC, NAKW, Derp, COOT, Nols, Werd, Ndarod, Leto, Bora and RECO. These viruses usually spread by the means of email attachments and fake installators. It’s necessary to install the virus unnoticed by the user, so the code of the virus is injected into a harmful file and by the means of backdoors, the virus sneaks into the system. If your device is already infected with this virus, don’t try to decrypt .kodg files by yourself. Every manipulation with such a file can damage it permanently.

The encryption process can be described as the two-step one. It divides into the scanning and modifying of the file structures. At first the virus looks for the appropriate files, as it can modify only definite file formats. KODG ransomware can encrypt only documents and media files, as the encryption of all files would take a great amount of time. When it’s done, the virus begins to modify the structures of files and makes them unreadable. The encrypted files get a new extension – .kodg. Then, in order to force the owner of the infected device to pay, the virus creates the ransom note, that is called _readme.txt. You shouldn’t trust them and it’s better to avoid any contact with them. Hackers can easily make the situation even worse. It’s a common practise for them to stop all contacts with the victim, once they receive the payment. If you really need to remove KODG ransomware and decrypt .kodg files our guide may be helpful for you!

_readme.txt

---

Article’s Guide

1. How to remove KODG Ransomware from your computer
2. How to remove KODG Ransomware encryption from your files
3. Data Recovery
4. Automated decryption tools
5. Windows Previous Versions

---

How to remove KODG Ransomware from your computer?

We strongly recommend you to use a powerful anti-malware program that has this threat in its database. It will mitigate the risks of the wrong installation, and will remove KODG from your computer with all of its leftovers and register files.

Solution for Windows users: our choice is Norton 360 . Norton 360 scans your computer and detects various threats like KODG, then removes it with all of the related malicious files, folders and registry keys.

Download Norton

If you are Mac user, we advise you to use Combo Cleaner.

---

How to decrypt .kodg files?

Once you’ve removed the virus, you are probably thinking how to decrypt .kodg files. Let’s take a look at possible ways of decrypting your data.

Recover data with Data Recovery

1. Download and install Data Recovery
2. Select drives and folders with your files, then click Scan.
3. Choose all the files in a folder, then press on Restore button.
4. Manage export location.

Download Stellar Data Recovery

_{The download is an evaluation version for recovering files. To unlock all features and tools, purchase is required ($49.99-299). By clicking the button you agree to EULA and Privacy Policy. Downloading will start automatically.}

---

Restore data with automated decryption tools

Unfortunately, due to the novelty of KODG ransomware, there are no available automatic decryptors for this encryptor yet. Still, there is no need to invest in the malicious scheme by paying a ransom. You are able to recover files manually.
You can try to use one of these methods in order to restore your encrypted data manually.

Decrypt .kodg files with Windows Previous Versions

This feature is working on Windows Vista (not Home version), Windows 7 and later versions. Windows keeps copies of files and folders which you can use to restore data on your computer. In order to restore data from Windows Backup, take the following steps:

1. Open My Computer and search for the folders you want to restore;
2. Right-click on the folder and choose Restore previous versions option;
3. The option will show you the list of all the previous copies of the folder;
4. Select restore date and the option you need: Open, Copy and Restore.