Solved Laptop infected by ransomware MADO

Thread Starter
Jun 3, 2020
My Laptop is infected by the mado ransom ware. It renamed all my docs, jpegs, xls etc files with extension .mado All files are in the encrypted form. Please help to decrypt the same.

Attaching a report generated using an antivirus software.




Malware Trainee
Sep 4, 2019

Apologies for the delayed reply.

If you still need help:

1. Check if your files can be decrypted

The first thing you can do is to upload samples of encrypted files, ransom notes and any contact email addresses or hyperlinks provided by the cyber-criminals to ID Ransomware (IDR). This service is strictly for identifying what ransomware may have encrypted your files. It will attempt to point you in the right direction, and let you know if there is a known way of decrypting your files.

2. Check your computer

Regardless of the result, and although you posted the two Malwarebytes reports, to ensure that the the system is otherwise clean, please do the following:

Download Farbar Recovery Scan Tool and save it to your desktop. --> IMPORTANT

If your antivirus software detects the tool as malicious, it’s safe to allow FRST to run. It is a false-positive detection.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
  • Double-click the FRST icon to run the tool. When the tool opens click Yes to disclaimer.
  • Press Scan button and wait for a while.
  • The scanner will produced two logs on your Desktop: FRST.txt and Addition.txt.
  • Please copy and paste the content of these two logs in your next reply (or attach/upload).


1. Do not run any tool unless instructed to do so. Also, do not uninstall or install any software during the procedure, unless I ask you to do so.

2. Always ask before act. Do not continue if you are not sure, or if something unexpected happens.

3. I am still in training and my fixes have to be approved by my instructor, so there may be a slight delay in my replies. Look at it as a good thing though, since you will have two people looking at your problem.


Malware Trainee
Sep 4, 2019
I'm leaving this thread due to lack of feedback.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Members online