Dutan Ransomware Removal Guide

Threat Level:
Rate this Article:
Comments (0)
Article Views: 451
Category: Trojans

Dutan Ransomware is a computer infection that will lock up your files. It will ask you to pay for the decryption tool that should unlock your data, but paying these criminals is never an option. What’s more, there is no guarantee that these criminals would actually issue the decryption key, so you would only lose your money if you were to transfer the payment.

Please scroll down to the bottom of this description for the manual removal instructions. It is not that complicated to remove Dutan Ransomware on your own, but if you do not feel confident about it, you can always get yourself a powerful antispyware tool that will help you get rid of this infection for good.

Technically, there is nothing too unique about this infection. It comes from the STOP Ransomware family, so it means that it is practically identical to Pedro Ransomware, Cetori Ransomware, Banta Ransomware, and so on. What’s more, the same public decryption tool can be applied to all these infections provided an offline encryption key was used to lock up target files. If the infection used an online key, the public decryption key that is currently available will not work anymore.

Either way, it is not a good idea to rely solely on a decryption tool that might be released or might not. To mitigate the damage of a ransomware infection, you need to back-up your files either on a cloud drive or an external hard drive. Although this seems like an outdated measure, it is the best way to protect yourself from a ransomware infection because sometimes decryption tools just do not get developed (especially if ransomware programs are rather low-profile, and there are not that many infections). Now, Dutan Ransomware might come from a prominent ransomware family, but the program itself is just one of the many, and so it is very unlikely that a single decryption tool for this one program will be created.

Although it might not be possible to restore every single file (especially if you do not have a back-up), there is no need to panic. This program wants you to do just that. Why? Because if you panic, you are more likely to do what this infection asks. In every single folder affected by the encryption, you will find a ransom note _readme.txt. This ransom note shares pretty much the same text with all the other ransom notes left by other programs in the same group.

The ransom note says that you must contact the criminals within 72 hours if you want to get a discount for the decryption tool that these crooks offer. However, there is no guarantee that these criminals would issue the decryption key even if you were to pay the money. This is something that computer security experts have been trying to convey all this while: trusting these crooks does not lead anywhere.

Rather than looking for ways to pay the ransom, you should focus on removing Dutan Ransomware from your computer. As mentioned, you can delete the infection manually. It could be rather burdensome because you would have to find the files that launched the threat. The best way to locate all the malicious files is to run a full system scan with a security tool of your choice. The same tool can help you remove Dutan Ransomware once and for all.

Now, as for your files, if you feel that you have run out of file recovery options, please be sure to address a professional, who would tell you more about what you could do. Please bear in mind that there is always a chance you might have to start building your file library anew.

How to Remove Dutan Ransomware

  1. Delete the most recent files.
  2. Press Win+R and type regedit. Click OK.
  3. Open HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run.
  4. On the right, right-click the SysHelper value.
  5. Select Delete on the drop-down menu and close Registry Editor.
  6. Use the Win+R command to open the %AppData% and %LocalAppData% directories.
  7. Delete a folder with a random alpha-numeric name from those directories.
  8. Press Win+R and type %WinDir%. Click OK.
  9. Go to System32\Tasks and delete the Time Trigger Task.
  10. Run a full system scan with SpyHunter.
Download Remover for Dutan Ransomware *
*SpyHunter scanner, published on this site, is intended to be used only as a detection tool. To use the removal functionality, you will need to purchase the full version of SpyHunter.

Dutan Ransomware Screenshots:

Dutan Ransomware


Your email address will not be published.


Enter the numbers in the box to the right *