I wrote this article to help you remove Angry Duck Ransomware. This Angry Duck Ransomware removal guide works for all Windows versions.

According to specialists, ransomware is the biggest cyber threat we are forced to deal with nowadays and it seems like newer and newer pieces are being developed every single day. Take the Angry Duck Ransomware, for example. One of the most recently created, it is already raging out worldwide. It goes without saying that the sooner it`s taken down the better.

Angry Duck uses the not so common AES-512 and RSA-64 FIPS encrypting algorithm to lock all of your files you have stored on your PC. Nothing is beyond its reach – files, pictures, music, MS Office documents, work-related files, personal information, everything. The parasite is capable of locking pretty much all existing file formats. Knowing this, you must get why everything you have in your PC will fall in the ransomware`s encrypting hands.

Once encrypted, your data becomes inaccessible and unusable. Angry Duck replaces all locked files` original extensions with its malicious “.adk” one by utilizing a strong encrypting cipher. Then, you PC is not able to recognize any of them and you are left with useless icons. However, there is something more you are left with – a brand new desktop wallpaper with a picture of a pissed off duck. If the situation was different it would be quite funny actually. The wallpaper also contains the following note:

*** ANGRY DUCK ***
All your important files have been encrypted using very string cryptography (AES-512 with RSA-64 FIPS grade encryption)
To recover your files send 10 BTC to my private wallet.
DON’T MESS WITH THE DUCKS!!

This message plays the role of the ransom note. Informs you what the ransomware has done and blackmails you, of course. That`s what these infections have been created for. Monetary gain. All of them follow the same pattern. Invade. Encrypt. Extort. But, let`s pay attention to the ransom sum demanded. 10 Bitcoins. 10 Bitcoins are approximate $6500 of worth. This is not like most ransomware pieces which are satisfied with much smaller amounts. This one is extra greedy. The crooks promise to provide a decryption tool once you have paid. However, how do you know for sure that they are going to keep they end of the deal? You don’t. You will never have a guarantee as your files are not the crooks` priority. Your money is.

Moreover, the sum should never affect your decision to pay or not to pay, but it this particular case, you simply can`t afford to take that risk. It is a lot of money you may lose and not obtain the decryption tool anyway. Luckily for you, you don’t have to put your money on the line. Our removal guide will help you get rid of the ransomware once and for all and recover your files without paying a single cent. Just follow the steps below.

Also, think of how a nasty ransomware like this one managed to infect you. Ransomware pieces and all cyber infections, in general, are very sneaky. They fool you and slither in your system completely undetected. In Angry Duck`s case, the most likely scenario is that it used the spam email invasion tactic and landed directly in your inbox. Not even the spam inbox but the regular one. From there, you must have opened it and politely invited it on your PC. Only one single click of yours is enough to represent your consent. Always be careful online.

Do not open emails lightly if they look suspicious or you don’t know who they are from. The same goes for shady looking pages/link/torrents/software bundles. They should all be avoided. This is not all. Sometimes ransomware poses as a fake update to trick you and other times it has help from other parasites, like Trojans. Cyber infections can lurk from anywhere and it`s up to you to do your best to at least decrease their chances of getting to you so easily.

Angry Duck Ransomware Uninstall

Method 1: Restore your encrypted files using ShadowExplorer
Usually, Angry Duck Ransomware deletes all shadow copies, stored in your computer. Luckily, the ransomware is not always able to delete the shadow copies. So your first try should be restoring the original files from shadow copies.

1. Download ShadowExplorer from this link: http://www.shadowexplorer.com/downloads.html.
2. Install ShadowExplorer
3. Open ShadowExplorer and select C: drive on the left panel
4. Choose at least a month ago date from the date field
5. Navigate to the folder with encrypted files
6. Right-click on the encrypted file
7. Select “Export” and choose a destination for the original file

Method 2: Restore your encrypted files by using System Restore

1. Go to Start –> All programs –> Accessories –> System tools –> System restore
2. Click “Next“
3. Choose a restore point, at least a month ago
4. Click “Next“
5. Choose Disk C: (should be selected by default)
6. Click “Next“. Wait for a few minutes and the restore should be done.

Method 3: Restore your files using File Recovery Software
If none of the above method works, you should try to recover encrypted files by using File Recovery Software. Since Angry Duck Ransomware first makes a copy of the original file, then encrypts it and deletes the original one, you can successfully restore the original, using a File Recovery Software. Here are a few free File Recovery Software programs:

1. Recuva
2. Puran File Recovery
3. Disk Drill
4. Glary Undelete