Barrax Ransomware

Posted by Max Lehmann on March 9, 2017

What is Barrax Ransomware?

Barrax Ransomware is an extremely dangerous computer threat that can successfully block you from accessing your files. It goes without saying that you must remove this malicious threat from your system, but it is just as important that you have a file backup because, at the moment, there is no way to decrypt your files.

In this description, we will tell you more about this infection, and we will also tell you about the steps you can take to get rid of Barrax Ransomware for good. Finally, you should do everything in your power to ensure that similar programs do not enter your system again. test test

Where does Barrax Ransomware come from?

Our research team does not give a definite answer regarding the method of distribution, but we have a few solid guesses. It is very likely that Barrax Ransomware entered your system in a spam email attachment. Spam email campaigns are very often used for ransomware distribution. Although most of the spam emails are filtered into Junk folders, there are quite a few messages that manage to get through this filter and land in the main inbox. These messages look like invoice notifications from online stores, and reports from financial institutions.

However, if you receive a notification from a bank where you do not have an account, it should be more than obvious that you must ignore the message. All the more so, if the message comes with an attachment. Of course, it is always possible to scan the attachment in question with a security program, but how many users would actually think of such a thing? The truth is that they end up running the attachment, and then the malicious program gets installed on their computers.

A ransomware program may also arrive via flash exploits when a pop-up is embedded with an outgoing link that launches the ransomware installer download. Whichever it might be, the bottom line is that it is a lot easier to get infected with a malicious program than you think, and you have to remain cautious when you browse the web.

What does Barrax Ransomware do?

As mentioned, the program encrypts your files, although it does not lock the screen. Barrax Ransomware uses the AES-256 encryption key, thus making it virtually impossible to decrypt the affected files by chance. All of the affected files with have the .BarRax extension next to their original filename. This extension is the reason this infection is called Barrax Ransomware. When the file encryption is complete, the ransomware displays a ransom note that says the following:

Files has been encrypted with BarRax crypter
Go to BarRax.tk
For more info
If you get crypted im sorry i not published this crypter yet i dont know from where you downloaded it
I can uncrypt your pc for FREE!
Go here: http://barrax.tk/forumdisplay.php?fid=39

Here it might seem as though the Barrax Ransomware infection is just a mean joke, and its creators are willing to decrypt your files. However, the link given in the ransom note redirects you to a legitimate forum that does not seem to have anything in common with the infection. Hence, it is a dead end.

How do I remove Barrax Ransomware?

It is possible to delete the infection manually, but it is always a good idea to employ a legitimate antispyware tool, too. You may need to scan your computer for other potential threats that might have entered the system while you were browsing unfamiliar websites. Also, you have to remove Barrax Ransomware before transferring healthy copies of your files back into your hard drive because the infection may affect them, too.

You should be able to find copies of your infected files in an external hard drive, in a virtual cloud drive, or perhaps saved in your inbox. The point is that it is very likely that you have most of your files saved in various places, and you should be able to restore them, as currently, a public decryption tool is not available.

Should you have more questions about the infection or how to protect your computer from similar intruders, please do not hesitate to leave us a comment. Our team is always ready to assist you, as your computer’s security matters.