How to recover
Files Encrypted by Haters Ransomware
from Windows

My Windows 10 has been hit by Haters ransomware, and I really need to get my files back! What are the options that I have in this situation?

Haters is a brand new crypto-ransomware that showed up on the web pretending to be one of Cerber’s follow up versions -- Cerber3Ransomware. Nevertheless, it is actually a spin-off of a less popular but rapidly growing Stupid ransomware family which blew up with new versions just over the span of the last month. It has been successful in robbing victims of their money and files, allowing criminals to make an easy fortune out of it. We can only presume that the extortionists are not planning on stopping just there and new malware versions are already on their way. In the meanwhile, we should learn about its latest active versions to be able to avoid them. Luckily, the malware experts already have that covered. They have researched the virus thoroughly and found that Haters is a lockscreen virus which opens a pop-up called Form 2 when it is done encrypting files. This pop-up window informs that the computer’s files have been encrypted and asks to enter a special decryption code in order to recover them. What lacks is the explanation about how the victims should obtain the code or who to contact for further data recovery instructions. This demonstrates that the virus is still under development and additional functions are still to be added in the future. As for now, the virus appends files with .haters extensions and prevents users from accessing their data by displaying the already mentioned pop-up window. The most important news is that the ransomware is also decryptable. The malware analysts have found that out while browsing through the program’s source code. Besides, since the virus belongs to the Stupid virus family, it is also susceptible to Stupid Decrypter. We will explain how to use both of these recovery methods below, but before you proceed, please remember that you will have to remove Haters from your computer regardless of whether you manage to recover your files or not. It is a malicious program, and there is definitely no place for it on your computer. Banish the parasite from your device for good with the help of [red id=”Reimage”] or similar malware detection software.

Method 1: Use the decryption code

The mistake left in the Haters ransomware source code has revealed an easy way to terminate the software and regain access to the encrypted data. All you have to do is enter “masihmaubullyguaanjeng” string to the box next to the “Decrypt” button. After you are done with the procedure, just scan your device with some antivirus software to get rid of the bits of malware that are installed on the computer.

Method 2: Use Stupid Decryptor

Before you download and use the decryptor, please make sure you make backups of the encrypted files and read the following guidelines carefully.

1. Download the Stupid Decryptor from the official Michael Gillespie’s page or by clicking this link here.
2. Check the "Delete Encrypted Files" in the application’s settings if you want the copies of the encrypted files to be deleted after encryption.
3. Then, select the partitions, folders or specific files that you want to decrypt by clicking the “Select Directory” button.
4. Press “Decrypt” once you’re happy with your selection.
5. Wait for the program to inform you about a successful decryption.

We do not recommend running full system decryption at a time. Instead, run a test drive of the decryptor with one or a couple of files just to see if the software is working properly.