# \[SOLVED\] how to remove Mado file extention from files?

**URL:** <https://onehack.st/t/solved-how-to-remove-mado-file-extention-from-files/76546>\
**Category:** Tutorials & Methods\
**Tags:** solved, hacking, antivirus\
**Created:** [April 1, 2020, 5:04pm UTC](https://onehack.st/t/solved-how-to-remove-mado-file-extention-from-files/76546 "2020-04-01T17:04:18Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![blitz\_bibi](https://onehack.st/user_avatar/onehack.st/blitz_bibi/32/31116_2.png) [@blitz\_bibi](https://onehack.st/u/blitz_bibi)\
**Post date:** [April 1, 2020, 5:04pm UTC](https://onehack.st/t/solved-how-to-remove-mado-file-extention-from-files/76546/1 "2020-04-01T17:04:18Z")

</div>

Today my friend downloaded windows activator and installed it. Suddenly he noticed all of PC’s file encrypt and file’s extension was replace with .mado and in every folder he found a “readme” text file, asking for $500.

 ![Mado-file-ransomware](https://onehack.st/uploads/default/original/3X/6/c/6c6cd7a83338dc3eddf774c81cbd90e7b526a0e2.png)

Is there any solution for removing and recovery data?

---

<div class="post-metadata">

**Author:** ![arifapuskitto](https://onehack.st/user_avatar/onehack.st/arifapuskitto/32/22126_2.png) [@arifapuskitto](https://onehack.st/u/arifapuskitto)\
**Post date:** [April 1, 2020, 9:46pm UTC](https://onehack.st/t/solved-how-to-remove-mado-file-extention-from-files/76546/2 "2020-04-01T21:46:59Z")

</div>

Unfortunately your friend got infected by Ransomware.  
There is no known solution for this infection even if your friend pays ransom there is no chance to get data back.  
check back this URL,  
[https://onehack.st/search?q=Ransomware](https://onehack.st/search?q=Ransomware)

There are lots of suggestion.  
Thanks

---

<div class="post-metadata">

**Author:** ![hansenfrenico](https://onehack.st/letter_avatar_proxy/v4/letter/h/779978/32.png) [@hansenfrenico](https://onehack.st/u/hansenfrenico)\
**Post date:** [April 2, 2020, 12:08am UTC](https://onehack.st/t/solved-how-to-remove-mado-file-extention-from-files/76546/3 "2020-04-02T00:08:17Z")

</div>

There is still no working way to decrypt files which were encrypted by this type of Ransomware, since it uses RSA Algorithm for the encryption method. The best thing I can offer to you, is to try data recovery tools, but most of them can’t totally recover your friend’s files. You can also keep the encrypted files and then clean the computer, and wait for any working method.

You can try to submit your files here as well to get identified.

> **[Emsisoft: Free Ransomware Decryption Tools](https://www.emsisoft.com/en/ransomware-decryption/)**
>
> Free ransomware decryption tools by Emsisoft. Unlock your files without paying the ransom.

---

<div class="post-metadata">

**Author:** ![NoBody](https://onehack.st/user_avatar/onehack.st/nobody/32/163880_2.png) [@NoBody](https://onehack.st/u/NoBody)\
**Post date:** [April 4, 2020, 10:23pm UTC](https://onehack.st/t/solved-how-to-remove-mado-file-extention-from-files/76546/4 "2020-04-04T22:23:01Z")

</div>

Try this, it should work! 😐

Mado Virus File (.mado) Remove and Restore Files

[![](https://img.youtube.com/vi/ptfSc9N3J5w/maxresdefault.jpg "Mado Virus File (.mado) Remove and Restore Files") ](https://www.youtube.com/watch?v=ptfSc9N3J5w)