SARansom Ransomware

The SARansom Ransomware is a low-quality file-locker, which does not seem to be a very serious project. So far malware researchers have encountered only one sample of the SARansom Ransomware, and it was not spotted in the wild – In fact, it was found on an online security service used to scan potentially harmful files. Testing the SARansom Ransomware reveals that this file-locker does feature a working file-encryption algorithm so that it is fully capable of causing damage to the files stored on the infected computer. However, it is possible that the SARansom Ransomware might turn out to be decryptable so that we might get to see a free decryption utility in case the SARansom Ransomware becomes widespread.

Ludicrous Ransom Demands Aae a Likely Sign that this is a Hoax

The SARansom Ransomware's attack is characterized by two things – all locked files will have the '.enc' extension appended to their names, and the threat will create the file 'RANSOM_NOTE.txt' when the attack is complete. This file contains a short ransom message, which is the main reason why malware researchers consider this to be a poorly constructed project – the author demands a ransom sum of 5 Bitcoins in exchange for a decryption program. 5 Bitcoins cost slightly more than $30,000, and it goes without saying that no one in their right mind would accept to send such a ludicrous amount of money to anonymous cybercrooks.

In addition to their demands, the attackers have provided an e-mail address (TheLarnersour@gmail.com), which can be used to reach them for more details. Last but not least, the ransom fee is followed by a Bitcoin wallet address, which is supposed to receive the transaction. If you suspect that the SARansom Ransomware has attacked your computer, then we advise you to disregard the instructions found in the ransom note, because sending money to cybercriminals is never a good idea. Also, the operators of the SARansom Ransomware have not provided any reliable proof that they are able or willing to decrypt your files so that you might not get anything even if you pay the full price.

Victims of the SARansom Ransomware should not hesitate to run a trustworthy anti-virus scanner that will get rid of the malevolent files and prevent the SARansom Ransomware from causing more damage immediately. After this, they also should take the required steps to recover their files – either by using a backup or free file recovery software. The latter method, however, might not always deliver satisfying results.