Home > Ransomwares > How to Remove CTB-Locker Ransomware Virus

How to Remove CTB-Locker Ransomware Virus

January 27th, 2015

What is CTB-Locker?

Similar to USA Cyber Crime Investigations and Gobierno de España Ransomware, CTB-Locker is identified as a malicious program that is used to extort computer users. Possibly this dangerous virus hides in spam email attachments, freeware installation packages and hacked websites. In order to prevent this kind of pernicious virus from entering your system, you should update your antivirus program to the latest version in time. When your PC is carelessly hijacked by CTB-Locker, you should take immediate actions to remove it. After penetration, this ransomware will implant vicious codes and scripts into Windows system. That way, CTB-Locker is able to get access to Administrator privileges and encrypt your files. Subsequently, this ransomware will blackmail you and force you to pay a ransom of $300.

Besides, CTB-Locker cheats that it will permanently delete your files if you don’t transfer money within limited time. Actually, this ransomware only wants to scare you and cheat money. Even though you give money to the man behind CTB-Locker, you can’t take back your money. In this case, you should calm down and look for help to rescue your computer. If you don’t take this issue seriously, you will possibly have more troubles. CTB-Locker leaks out your information to the highest bidder and distributes Trojan viruses to your Windows system.

CTB-Locker Virus Screenshot:

CTB-Locker Virus is quite risky:

1. CTB-Locker Virus is a harmful ransomware.
2. CTB-Locker Virus is distributed by other destructive viruses.
3. CTB-Locker Virus modifies system default settings.
4. CTB-Locker Virus locks up the screen and prevents you using the PC.
5. CTB-Locker Virus is created by cyber criminals.

How to Remove CTB-Locker Virus Manually?

Back up your system FIRST! Manual removal is a very cumbersome and risky method to get rid of the virus. If you are really skilled and experienced in computer, you can try it with utmost care. But if you are not, please don’t take the risk of ruining your computer. It’s recommended that you use this Auto Fix Tool to fix your problem.

Enter the Safe Mode with Networking by pressing F8 incessantly before logging onto your Windows

Open Registry and delete CTB-Locker virus registry entries:

Typy in registry in the box.

Delete those corrupt registry entries.

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_CURRENT_USER\Software\Microsoft\ Outdated Browser Detected Internet Explorer 10\LowRegistry\DontShowMeThisDialogAgain
HKEY_CURRENT_USER\Control Panel\Desktop “Wallpaper” = “%MyDocuments%\AllFilesAreLocked .bmp”

Delete CTB-Locker virus associated components:

%app data%\suspicious.exe\
%AllUsersProfile%\{random}.lnk
%Temp%\.exe
%MyDocuments%\AllFilesAreLocked .bmp
%MyDocuments%\DecryptAllFiles .txt
%MyDocuments%\.html
%WinDir%\Tasks\.job


Categories: Ransomwares Tags:
Comments are closed.