How to remove Spongebob ransomware virus

Spongebob 2.0 imitates the infamous WannaCry; however, these attempts are unsuccessful

Spongebob ransomware is a new example of crypto-malware that cannot actually encrypt files on the affected computer. However, once it enters the system, it delivers a ransom note in the program window. Authors of the ransomware copied the design of WannaCry ransom note.

The ransom note runs in the “Spongebob ransomware virus 2.0” window. However, there is not much information about 1.0 version.^[1] Therefore, it was not a success. Luckily, hackers haven’t managed to create a dangerous virus again.

The ransom note starts with the saying “Oops, spongebob is encrypting your files.” Using the name of the well-known cartoon character does not create a serious image of the ransomware. Maybe, this virus was created as a joke. However, some researchers assume that it might be in-dev mode. Thus, delaying Spongebob removal is not a good idea.

Authors of the Spongebob virus claim that malware has affected the most important files, such as documents, photos, videos, databases, etc. Crooks want to make people believe that only their “decryption service” can recover files. Hackers took WannaCry’s instructions and demand to pay the ransom in 3 days. Otherwise, the ransom will double.

However, if the payment is not transferred to the provided Bitcoin wallet within 7 days, victim’s data will be unable to recover. But criminals want to be generous for “poor users” and might give some exceptions for them to pay the ransom in 6 months. Though, crooks forgot to enter the size of the ransom. It goes without saying that you should not use “Contact Us” section in order to figure out how much money they want.

The ransomware mostly spreads as a camouflaged email attachment or fake software downloads. Currently, several Spongebob ransomware attacks were noticed in the United States. However, malware might try to spread in European countries, such as Netherlands^[2] or Sweden. Once inside, it might install several files that are designed to create malicious tasks:

• KKKryptoLocker.exe;
• Trojan.Ransom.Filecoder.BL.exe;
• Spongebob Ransomware 2.0.exe;
• ec1.exe ec1e8d861fc4357e5652b827464d9577fa1be9a2d5b8a1f93cb179bf3ca479c1.exe;
• ec1e8d861fc4357e5652b827464d9577fa1be9a2d5b8a1f93cb179bf3ca479c1.exe;
• localfile~.

Once inside it might modify some Windows directories and make some slight system changes. Therefore, it’s best to remove Spongebob with the help of FortectIntego or another professional malware removal tool. Then you will be able to recover your files using third-party software.

Protecting computers from ransomware attacks

Cyber criminals create new ways to spread ransomware viruses and hijack the systems^[3]. Keep in mind that even the most powerful security software is helpless if you click on the obfuscated file or download a malicious program. In order to avoid ransomware attack, you have to:

• never open suspicious spam emails;
• not click on strange links or buttons provided in the email if you do not know the sender;
• never open suspicious Word, Excel or PDF file that is named “statement,” “invoice” or similarly;
• not download illegal content from the Web;
• not click eye-catchy and aggressive ads;
• avoid file-sharing sites and P2P networks;
• keep software and operating system updated.

Uninstall Spongebob virus with security software

Spongebob removal should be held with antivirus or malware removal software. We recommend completing this job with FortectIntego, SpyHunterCombo Cleaner or MalwarebytesMalwarebytes. These tools can easily detect ransomware and wipe out it from the system. If ransomware prevents from installing security software, you should check the instructions below.

Once you remove Spongebob ransomware, you should be able to use your files normally again. If you find some of the files missing or encrypted, you should check data recovery methods presented at the end of the article.