Not open for further replies.


New Member
Hello I am using HP Laptop Windows. I have a program named "Search powered by Yahoo" that I wanted to remove so I downloaded a crack version of a program remover(I forgot the name and the link sorry). Instead of removing the program, my laptop got infected by a virus I didn't know, I know that it got infected because every file in my laptop has a name added after them ". mado" so I think the virus' name is MADO so I've researched about it and how to remove it and I got into your website I've done all the steps you told but it didn't work so I joined your forum anyways you said it is a virus RANSOMWARE but I didn't get any RANSOMWARE note so I can't report it so please help me all files in my laptop is important, it has almost all my photos which is special it has my memories with my classmate and family so please help me!


Staff member
Hello, Welcome to MALWARETIPS.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.

.Mado belongs to the Stop/Djvu ransomware family.

You can submit a Sample of Encrypted Files to:

ID Ransomware

They will inform you of the files can be restored.

From what we know today there is now way to restore them.

Copy the bad files to a Flash drive in case a solution is found in the future.

The only way now to restore your files is that if you have a backup of them.

Good luck.
Not open for further replies.