How to remove Datax Ransomware and decrypt files

What is Datax Ransomware?

Datax is another variant of Phobos ransomware. Indeed, it is practically no different from its predecessor that encodes data on the infected computer. Then everything goes according to the worked-out scheme. Cybercriminals leave a note asking to transfer them money in exchange for decryption services. Still, if you got hit with this ransomware, let us warn you – do not spend any money on ransom, there are a lot of reports that cybercriminals just ignore their victims. Instead, you may try using this guide to remove Datax Ransomware and decrypt files without spending any money.

Datax ransomware

In most cases, Datax Ransomware crawls into victims’ computers via infected emails and fake updates like Adobe flash update. Then it starts infecting files using an encryption algorithm. As a result, all of the important files become encrypted gets an extension according to this template: .@datax.[random characters] extension. For example, file “myfamily.jpg” will turn into “myfamily.jpg.@datax.4AC-BCE-B38“. At the end, it displays a pop-up window (!!! ALL YOUR FILES ARE ENCRYPTED !!!.hta) where users find instructions to restore files from cybercriminals:

Hello my dear friend

Unfortunately for you, a major IT security weakness left you open to attack, your files have been encrypted
If you want to restore them install ICQ software on your PC here hxxps://icq.com/windows/ or on smartphone from Appstore / Google Play Market search for “ICQ”
Write to our ICQ @datax hxxps://icq.im/datax/
Tell us your file ID –

Attention!
Do not rename encrypted files.
Do not try to decrypt your data using third party software – it may cause permanent data loss.
We are always ready to cooperate and find the best way to solve your problem.
The faster you write – the more favorable conditions will be for you.
Our company values its reputation. We give all guarantees of your files decryption.
IF WE DON’T SEE MESSAGES FROM YOU IN 72 HOURS – WE WILL SELL YOUR DATABASES AND IMPORTANT INFORMATION TO YOUR COMPETITORS AND OTHER HACKERS IN THE DARKNET.

Although Datax is a really dangerous virus, you still have a good chance to get them back. Before deciphering, you should first stay focused on removing Datax Ransomware to avoid re-infection. Once Datax Ransomware is removed, you can proceed with decryption. Both automatic and manual solution is presented here that we hope will help you remove Datax Ransomware and recover your files.

How to remove Datax ransomware?

To make sure that the ransomware won’t reappear, you need to delete Datax ransomware completely. For this, you need to remove the files and registry entries of the ransomware. We should warn you that performing some of the steps may require above-average skills, so if you don’t feel experienced enough, you may apply to the automatic removal tool.

Download SpyHunter

Performing an antimalware scan with Norton would automatically search out and delete all elements related to ransomware. It is not only the easiest way to eliminate ransomware but also the safest and the most assuring one.

How to decrypt files

Restore files with Stellar Data Recovery

Stellar Data Recovery is an essential tool in the fight against ransomware-type viruses that can recover encrypted files.

stellar data recovery tool

  1. Download Stellar Data Recovery and launch it
  2. Select the drive you want to recover and click START SCAN
  3. After scanning is finished, you are presented with a list of recoverable files found.
  4. Select the required files and click the Recover
Download Stellar Data Recovery

Restore the system

  1. Initiate the search for system restore
  2. Click on the result
  3. Choose the date before the infection appearance
  4. Follow the on-screen instructions

Roll the files back to the previous version

  1. Right-click the file and choose Properties
  2. Open the Previous Version tab
  3. Select the latest version and click Copy
  4. Click Restore

If the above-mentioned mDataxods didn’t help in eliminating the threat, then it’s better to rely on an automatic way of deleting Datax Ransomware.

How to prevent ransomware infection

To prevent infection with ransomware-type viruses, you should have proper antimalware software. This mDataxod is convenient because it allows you to detect a virus before it penetrates, and therefore to avoid infection and the loss of all your data. It is capable of protecting not only home computers but also server systems in large organizations. Download antimalware program to secure your system and privacy.
Download SpyHunter

Leave a Reply

Your email address will not be published. Required fields are marked *