Sardoninir ransomware appends an extension to files and prevents victims from accessing them

Sardoninir virus happens to be another file-encrypting computer program[1]. It is another example of ransomware which threaten users into remitting the payment within the specified amount of time[2] – CryptoWall or WannaCry are one of the more prominent examples of such strategy.
Once installed, malware rushes to encrypt all data on the system with AES encryption algorithm, which also applies the .enc extension to the them. Suchlike files can then no longer be accessed or modified. Malware then drops a ransom note window which includes the timer of 24 hours and a demand to pay $100 worth of cryptocurrency.
| Name | Sardoninir ransomware |
| Type | File-locking virus |
| Encryption method | AES |
| File extension | .enc is appended to each of the affected files |
| Contact | safeanonym14@sigaint.org |
| Ransom demand | $100 to be paid in Bitcoin |
| Malware removal | Install powerful antimalware software and perform a full system scan |
| System fix | Once the virus is deleted, we recommend using FortectIntego to fix damaged Windows system components to avoid reinstallation of the operating system |
The ransomware market is full of vivid file-encrypting threats varying in their design, operation modes, the degree of complexity, etc. Fortunately, there are few highly destructive threats. However, they are able to wreck a serious damage worldwide. Speaking of this malware strain, it follows the basic operation pattern.
Though it is still under development, it hides its payload in spam emails[3]. After that, it encrypts the files with a strong algorithm which generates a unique complex key. It results in locking all your important data and attaching .enc file extension to each affected file.
At this stage, the ransom message appears alarming you with the elapsing clock. It instructs the victims to pay the ransom in return for the decryption key. In case you intend to contact the crooks, they provide safeanonym14@sigaint.org email address.
You might try paying the ransom but it does not give any guarantees that the crooks will return the files. On the other hand, they may just ignore your plea for mercy. The malware is still suspected to be under development so the virtual community should be vigilant. Instead, proceed to Sardoninir removal.
Ransomware distribution techniques
Ransomware authors devise new ways to break through into users’ computers. Usually, they do so by forcing them to open corrupted spam emails[4]. This is when the infection of ransomware takes over the computer. In addition, you should be aware of trojans and other sorts of malware that serve as mediators for the ransomware to enter your device.
Exploit kits often perform such a role. Therefore, you should be careful not only while browsing online but arm up with proper security applications. It would be better to combine anti-virus and malware removal utility. Update them and run the scan, the latter will help you remove all malware as well.
Sardoninir elimination guide
When it comes to crypto-malware, do not waste time and energy meddling with Sardoninir ransomware removal manually. Run the scan with SpyHunterCombo Cleaner and MalwarebytesMalwarebytes. Note that they will not help you decrypt the files. For that reason, alternative solutions might be effective.
Some of them are suggested under the headline “Bonus decryption methods” below the instructions. Speaking of them, they will help you regain full control of the computer if you struggle with virus removal. On the final note, keep in mind that file-encrypting threats rapidly evolve, and the hackers tend to shift their attention to mobile devices as well[5]. For that reason, keep the system up-to-date and retain cautiousness.
Did this guide help?
3 comments
mandela44
Terrifying us with such clock all the time...anyway, anyone knows how to recover files without paying the ransom?
kikkoman
My friend was infected with another virus, she recovered the files though.
patronusWIndows
There are so many of them that they become boring already.