Skip to content
  • Active
  • Severity: High
  • Ransomware
  • Windows
  • Verified · Oct 2016

How to remove Angry Duck ransomware virus

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Olivia Morelli · Ransomware analyst

Angry Duck ransomware demands 10 BTC in exchange for the decryption software

If your desktop wallpaper was suddenly changed to a picture of an angry duck, you should understand that it is not some silly joke, but a disaster, because it indicates that the computer has been attacked by Angry Duck virus, also known as Angry Duck ransomware. No matter how funny the ransomware name sounds, the aim of this virus might quickly blow away the smile from your face. The virus encrypts all files, or, in other words, distorts their structure and makes them inaccessible. It claims to be using AES-512 and RSA-64 FIPS encryption algorithms, which are not that popular among ransomware developers. In addition to that, it adds .adk file extension to every file it encrypts, and then replaces desktop image with the aforementioned image of a duck and a short note next to it, saying:

*** ANGRY DUCK ***

All your important files have been encrypted using very strong cryptography (AES-512 with RSA-64 FIPS grade encryption).

To recover your files, send 10 BTC to my private wallet.

DON’T MESS WITH THE DUCKS!!

No matter how bizarre the ransom note looks, it is actually not possible to decrypt .adk files without the unique decryption key that is kept on secret servers created by cyber criminals. What is more, the ransom price is enormously high, and we doubt that any of the victims would ever decide to pay it – criminals ask for 10 BTC, which equals to almost 6500 USD. Even if you have such sum of money, please, do not give it away for cyber criminals, because they might not send you the decryption key. You cannot trust cyber criminals and expect that they will help you to decrypt your files. We recommend you to remove Angry Duck ransomware with FortectIntego software and restore your files from a backup. You must eliminate the ransomware before plugging the data storage device into the compromised computer; otherwise, files stored on the device will be encrypted as well. To learn how to deactivate the virus and run the Angry Duck removal tool, follow instructions presented below the article. Angry Duck ransomware encrypts files and blackmails the victim, asks to pay a ransom

How did you infect your computer with this ransomware variant?

Ransomware viruses can infiltrate the computer when it lacks protection. That means that your anti-malware program is probably outdated, or you do not have one at all. Ransomware viruses reach victims using various techniques, and you should be aware of them all. The most popular method used to spread ransomware is sending malicious email attachments directly to victim’s emails. Typically, such emails are professionally crafted and seem trustworthy at first sight. For example, they can look like a message from a medical or government institution, and contain an email attachment entitled as an invoice, announcement or legal notice. We recommend you to always carefully inspect who is the sender of the message before opening it or files attached to it. Typically, scammers make a lot of grammar mistakes, so if you see them in the message that has just appeared in the Inbox section, better delete such email. What is more, ransomware can attack your computer via malicious ads or websites that contain an exploit kit, and in such cases, probably the only tool that can block the malware is an active anti-malware software.

How to remove Angry Duck virus?

To remove Angry Duck virus, use a strong anti-malware software. Do not try to delete this virus manually because it is a very hard thing to do, even if you are an experienced PC user. This piece of malicious software appears to be sophisticated, and it can damage your files for good, so we encourage you to rely on a reliable anti-malware software rather than try to uninstall it by yourself.

Did this guide help?

4 comments

  1. rowan

    Now THATS a ridiculous name for a ransomware.

  2. Tie6to

    freaks... criminals ask for 6500 dollars thats crazy. they have lost their minds

  3. Ian

    Here comes the angry duck... encrypted my files and it stares at me now. Gotta start my antivirus to remove it...

  4. Alayna

    Im not gonna pay. now how to remove this

Spyware News
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.