JackSparrow Ransomware

What is JackSparrow Ransomware?

JackSparrow Ransomware is an encryptor, and it goes after your personal files if it gets the chance to do so. It might get the chance if you open spam email attachments, download files from unreliable sources, interact with misleading advertisements, postpone system and software updates, or leave your operating system unprotected. Unfortunately, although there is plenty of information about malware, its distribution, and ways to prevent successful attacks, some Windows users continue to be careless, and that is why ransomware thrives. The bad news is that, in most cases, ransomware uses encryptors that cannot be deciphered, which means that victims are not able to recover their files. You certainly cannot recover files by deleting JackSparrow Ransomware. That being said, the removal of this malware is very important, and, hopefully, you can replace your files afterward. Needless to say, replacement is possible only if copies exist, and your chances of using them successfully are better if they are stored outside the infected computer.test

How does JackSparrow Ransomware work?

There are thousands and thousands of file-encrypting threats in the wild. Some of the more recent ones include MonCrypt Ransomware, BlueCheeser Ransomware, BBOO Ransomware, and MOOL Ransomware. Some of them are unique, and some belong to large families. JackSparrow Ransomware is not unique. In fact, it is a new variant of another well-known infection, CryptoWire Ransomware. According to Anti-Spyware-101.com researchers, while these infections are similar, the JackSparrow variant appears to be more advanced. The ransom demand is certainly clearer. It is introduced to the victims as soon as all personal files are encrypted using a window entitled “JackSparrow.” First, you are introduced to a list of files that are encrypted. By the way, the “.encrypted” extension is supposed to be added to the original filenames. Below the list, you can see a ‘Buy Monero’ button, and that is a huge difference from the CryptoWire variant, which requested the ransom to be paid in Bitcoin. As you know, both Monero and Bitcoin are types of crypto-currency, and most ransomware creators demand ransoms to be paid using it.

The main message represented via the JackSparrow Ransomware window declares that you are supposed to pay 100 XMR (Monero) for a decryption key that, allegedly, could restore your personal files. The attackers want you to email them at jacksparrow@protonmail.com so that they could send you information about the payment. At the time of research, 100 XMR was more than 7,000 USD, and that is not the kind of sum you can be willy-nilly about. At the end of the day, whether or not you can afford to pay the ransom requested by JackSparrow Ransomware, we suggest keeping the money for something that benefits you. That is because it is unlikely that you would obtain a decryptor after paying the ransom. Instead of wasting your savings, think about investing some of it in reliable security software or secure file storage. Although free cloud storages exist, most of them have limited space, and you want to have all files backed up. Of course, there are other ways to secure your files as well. What is important is that you have copies stored safely because once you remove malware, you can use the copies to replace the corrupted files.

How to delete JackSparrow Ransomware

Do you have backups/copies of your personal files? If you do, do not rush to replace the corrupted files because you need to remove JackSparrow Ransomware first. This malware can auto-start with Windows, and if you are not careful, it could potentially encrypt the replacements too. The guide below should assist those who have decided to remove the infection manually. Hopefully, you can identify and erase all malware files. That is not all, however. While deleting JackSparrow Ransomware is important, it is just as important that you secure your operating system to ensure that you do not need to deal with new file-encryptors in the future. Have you thought about implementing anti-malware software? It can simultaneously erase malware and secure your system. Besides taking care of that, also remember to create and protect copies of personal files, and do not forget to exercise caution online.

Removal Instructions

  1. Launch File Explorer by tapping Win+E keys.
  2. Enter %WINDIR%\System32\Tasks\ into the bar at the top.
  3. Delete the task named 1016990091.
  4. Enter %COMMONPROGRAMFILES% into the bar at the top.
  5. Delete the [unique name].exe file that launched the infection and also files named log.txt, 1900996101, and 10169900911016990091.
  6. Exit File Explorer and then Empty Recycle Bin.
  7. Employ a reliable malware scanner to perform a full system scan. 100% FREE spyware scan and
    tested removal of JackSparrow Ransomware*


Leave a Comment

Enter the numbers in the box to the right *