BarRax (HiddenTear variant) ransomware-affected file
File type: Ransomware encrypted file
Files with the .barrax file extension were encrypted and renamed by BarRax, a variant of the HiddenTear ransomware.
The extension marks the affected files and does not identify a normal file format that can be opened independently.
File type category:
Ransomware encrypted file
Date updated: October 17, 2026
The .barrax file extension was used by a BarRax variant of HiddenTear ransomware reported in late February 2017. HiddenTear is ransomware designed to run on Windows systems.
Like other ransomware of this type, BarRax encrypts user files and changes their names by adding its extension. The affected file contains encrypted content from the original file rather than data in a new, documented format.
The extension is therefore part of the ransomware's file-renaming scheme and is not associated with an ordinary application. Files retaining the extension remain affected unless the original data is recovered or successfully decrypted.
A .barrax file cannot normally be opened by the application that created the original file because its contents have been encrypted. Renaming the file or removing the extension does not decrypt it.
Use a trustworthy decryptor specifically identified for the BarRax or relevant HiddenTear variant, if one is available. Otherwise, recover the original files from a clean backup. Do not open or run unknown programs that claim to decrypt the files.
Affected .barrax files cannot be meaningfully converted while they remain encrypted. They must first be decrypted or restored from a backup.
After recovery, the files can be opened and exported using the application associated with their original file types.
Language