How to remove EggLocker ransomware

EggLocker – wannabe ransomware that aims at Czech computer users

EggLocker belongs to the group of file-encrypting viruses. During the encryption, it only makes copies of the files, renames them and appends .EGG file extension. It’s definitely an Easter-themed malware that emerged just around the holiday – the end of March 2018 – attacking computer users from the Czech Republic.^[1]

EggLocker virus is executed from EGG.exe file which typically is spread via malicious spam emails. However, this cyber threat is more a joke than a real ransomware^[2] virus. As we have mentioned, it does not actually encrypt data; it only renames copied files.

However, EggLocker ransomware can still make some changes to the system and make it vulnerable to other cyber threats. Additionally, it might be updated any minute and start functioning as real crypto-malware. Hence, immediate elimination is needed.

Soon after making a mess with files on the targeted computer, EggLocker changes the desktop picture and tries to threaten victims into paying a ransom:

EGG LOCKED

Your files has been locked due evil
chicken, your only way to get them
back is pay for chicken killers.

Bitcoin address: [redacted]

Any tries to remove chicken will just damage your files.
Be carefully with your decisions.

Malware continues pretending ransomware behavior and also creates a ransom note in the text file. The content in EGG.txt file is creative and extend the narrative about a chicken. However, author of malware forgot to tell the size of the ransom:

Your Windows might not support this software
Issues
Chicken has just awoken!
Your pc has to pay for all files otherwise
small chicken is going to eat them all!
There is no way to kill chicken.
Your attack means her respond

However, these are only threats to scare victims. Following the instructions is not needed. Though, remove EggLocker from the device without hesitation and continue using your files. Despite the fact, that technically it’s not properly functioning ransomware, you have to use security software for cleaning the device.

We recommend dedicating EggLocker removal for reputable security software to make sure that all malicious components are wiped out from the system entirely. If you do not know what software to choose, take our advise and obtain FortectIntego.

Malware distribution strategies

This piece of ransomware is not widely distributed yet. However, according to the latest research data, malware mostly attack Czech computer users, but the ransom note is written in English, so the hacker might have bigger goals.

However, security specialists remind basic security tips that help to avoid ransomware attack. We want to stress out that any security software can fully protect you. It doesn’t mean that obtaining a professional antivirus is not needed. Users should be careful too and watch their actions online.^[3]

• Avoid opening unknown email attachments. Always double-check the information about the sender, the issue, and look up for grammar mistakes.
• Stay away from ads that offer software downloads or updates, or unrealistic shopping offers or prizes.
• Do not install illegal programs, movies, music or similar content.
• Download needed software, updates and other content from developers or publishers website only.

Additionally, it is highly advised to create backups. You can use external drives or cloud services for backing up. In case of the cyber attack, you won’t need to consider paying the ransom.

Uninstall EggLocker from Windows OS

To remove EggLocker from the machine, you have to run a full system scan with a reputable malware removal program, such as FortectIntego or MalwarebytesMalwarebytes. In case, you cannot install or launch a program, follow the guide below. Our instructions will guide you through this procedure.

If you are thinking about manual EggLocker removal, you should ditch this idea right now. The virus still contains numerous malicious components that have to be eliminated to let your PC run smoothly and become less vulnerable to cyber attacks.