![Rar ransom note:
All your files have been encrypted. If you want to restore them, write us to the e-
mail:spystar1@onionmail.com
Write this ID in the title of your message [REDACTED]
You can also write us using this Telegram Username: @Rar_support
Do not rename encrypted files.
Do not try to decrypt your data using third-party software and sites. It may cause permanent data loss.
The decryption of your files with the help of third parties may cause increased prices (they add their
fee to our), or you can become a victim of a scam.
This is the end of the note. Below you will find a guide explaining how to remove Rar ransomware.](https://www.computips.org/wp-content/uploads/2022/11/how-to-remove-rar-ransomware.png)
What is Rar ransomware?
Rar is a ransomware program, which means it is a virus that makes money to the hacker by holding the victims’ files for ransom. Once on the victim’s computer, it encrypts all the files it can find. These files cannot be opened, edited, or viewed, so they’re virtually useless. However, encryption is a reversible process. Decrypting the files will restore them to their original state; this is exactly what the hacker charges money for.
Rar belongs to the VoidCrypt ransomware family; Eking is an example of another virus in it.
Rar changes the names of the files when it encrypts them; specifically, it adds victim’s unique ID, the hacker’s contact information (an e-mail address), and, finally .rar file extension. This might cause encrypted files to look like archive files, but they’re not. You will not be able to open them with WinRAR or a similar program.
Rar also leaves a ransom note, named simply “Read.txt”. The note itself is rather short and doesn’t contain much information, but you can read it on the image above.
Paying the cybercriminals is not recommended; often, they just disappear after receiving the money. The guide below will explain how to remove Rar ransomware and decrypt .rar files for free, without contacting the hackers.