Spare Ransomware

The Spare Ransomware will not spare any of your files if it manages to infect your computer. This threat is meant to lock you out of your files, and then promise to provide you with a recovery tool, but only if you send a few hundred dollars to the malware's operators. The Spare Ransomware's attack is characterized by several changes to your computer:

• Encrypted files will be impossible to use.
• Encrypted files will have their extension changed to '.id-<VICTIM ID>.[de.crypt@aol.com].spare.'
• The ransom note 'FILES ENCRYPTED.txt' will be dropped on the desktop.

The creators of the Spare Ransomware have used the Dharma Ransomware as a foundation for their project and, unfortunately, this means that the malware uses a flawless file-encryption mechanism, which is difficult to crack.

Because of the lack of free decryption tools, victims of the Spare Ransomware might be in an unfortunate situation. However, they should not consider trying to purchase a decryptor off of the attackers – trying to do this is likely to get you scammed. Instead, users affected by the Spare Ransomware attack should run an anti-virus scanner to terminate the threat, and then proceed to use reliable file recovery software and methods.