How to remove BHACKS ransomware and decrypt .bhacks files

What is BHACKS?

Every day the internet faces a new threat. In this article we will tell you about BHACKS ransomware. This virus doesn’t belong to any already known family of file-encryption ransonwares. Attacks of this virus are always unpredictable. It’s so due to the ways it spreads. The most widely used one is the usage of fake installers. Hackers share the file as if it’s important soft for the operating system. Such files can be found on the file sharing services, torrent trackers and specially made sites. As the rule, such sites look like official websites of well known companies. Victims are often redirected to such pages and by the means of various pop-ups are made to install promoted files. Moreover, hackers often send BHACKS ransomware by email. They inject the code of the virus into a regular file. Then this code is executed together with the opening of the file. If the virus successfully got into the system, it changes some keys in the Registry and tries to infect system processes to stay unnoticed by the built-in system protection. When it’s done, BHACKS searches for the files and modifies their structures. As the result, the files get new “.bhacks” extension, which is added to the file names. Then the virus drops the ransom note called “200 dollars.txt”. by the means of this note hackers try to force victims to pay for the decryptor. Unfortunately, it’s the surest way to decrypt your data, but hackers often just deceive their victims and as soon as they’ve been paid, stop all contacts with their victims. Still, there is a way out. That’s why we’ve prepared the detailed guide on how to remove BHACKS ransomware and decrypt .bhacks files.


you are locked by 2 ransomwares and im the only one with the decryption for both of them
send 200 dallors in amazon gift cards to
where you can buy amazon gift cards at a gas station best buy so buy the cards then
send me the cards and then ill test them and if it works i will send the decryption software
for the first one then the decryption key for
the second ransomware and the software with it to decrypt your file to you email
and snap a pick of the ransom note cause this will not pop up again when you restart your pc
if i did not explain enough if you pay me the money i will send you both the decryptions ones a
software and the other is a key but you need the file decryptor to decrypt the password but you
need the password to decrypt it with the software you get what im saying

Article’s Guide

  1. How to remove BHACKS Ransomware from your computer
  2. How to decrypt .bhacks files
  3. Data Recovery
  4. Automated decryption tools
  5. Other software

How to remove BHACKS Ransomware from your computer?

We strongly recommend you to use a powerful anti-malware program that has this threat in its database. It will mitigate the risks of the wrong installation, and will remove BHACKS ransomware from your computer with all of its leftovers and register files.

Solution for Windows users: our choice is Norton 360 . Norton 360 scans your computer and detects various threats like BHACKS, then removes it with all of the related malicious files, folders and registry keys.

Download Norton windows compatible

If you are Mac user, we advise you to use Combo Cleaner.

How to decrypt .bhacks files?

Once you’ve removed the virus, you are probably thinking how to decrypt .bhacks files or at least restore them. Let’s take a look at possible ways of decrypting your data.

Restore .bhacks files with Data Recovery

Data Recovery

  1. Download and install Data Recovery
  2. Select drives and folders with your files, then click Scan.
  3. Choose all the files in a folder, then press on Restore button.
  4. Manage export location.

Download Stellar Data Recovery

The download is an evaluation version for recovering files. To unlock all features and tools, purchase is required ($49.99-299). By clicking the button you agree to EULA and Privacy Policy. Downloading will start automatically.

Decrypt .bhacks files with other software

Unfortunately, due to the novelty of BHACKS ransomware, there are no decryptors that can surely decrypt encrypted files. Still, there is no need to invest in the malicious scheme by paying a ransom. You are able to recover files manually.
You can try to use one of these methods in order to restore your encrypted data manually.

Decrypt .bhacks files with Emsisoft decryptor

This software includes information about more than 100 viruses of STOP(DJVU) family and others. All that you need are two files or some luck. You can freely use it as it distributes free of charge. If it doesn’t work for you, you can use another method.

Restore .bhacks files with Windows Previous Versions

This feature is working on Windows Vista (not Home version), Windows 7 and later versions. Windows keeps copies of files and folders which you can use to restore data on your computer. In order to restore data from Windows Backup, take the following steps:

  1. Open My Computer and search for the folders you want to restore;
  2. Right-click on the folder and choose Restore previous versions option;
  3. The option will show you the list of all the previous copies of the folder;
  4. Select restore date and the option you need: Open, Copy and Restore.

Restore .bhacks files with System Restore

You can always try to use System Restore in order to roll back your system to its condition before infection infiltration. All the Windows versions include this option.

  1. Type restore in the Search tool;
  2. Click on the result;
  3. Choose restore point before the infection infiltration;
  4. Follow the on-screen instructions.

Was this tutorial helpful?
[Total: 0 Average: 0]

Leave a Comment

Time limit is exhausted. Please reload CAPTCHA.