Tuesday, May 5, 2015

Frustrated by CTB-Locker? - Step by Step Removal Instructions

CTB-Locker is really terrible


CTB-Locker falls into the group of ransomware. It's developed by a hacker from Russia. And now the FBI has provided a reward of 3 million US dollars to catch the developer of CTB-Locker. It's the highest reward in history. So, never take the ransomware slightly. And don't just rush to pay the ransom if your PC is infected by it.


After it got to your PC, it may encrypt all your files. And then it may pop up you message saying that to get back your files is impossible unless you pay the ransom within 72 hours. It warns you that you should try to remove the ransomware yourself or you may lose your files forever. Should you follow its instructions to pay? Don't forget that there is a big IF. Sometimes even after you paid, they would not let you get back your files. So what you need to do now is to remove the ransomware in case that it encrypts your other files or it spreads to your other healthy machine.

Want a quicker way to solve it? >>Click for the recommended Security Tool.

How does CTB-Locker spread?



Usually, this kind of threat spreads through spam email attachments. Some hacked websites and malicious links may also bring it to you. Don't say that you won't open spam email attachments. Just have a look at the screenshot below.



CTB-Locker can't be forgiven

  • It encrypts all your files and make them useless.
  • Fake alerts and random pop-ups keep haunting you.
  • CTB-Locker attacks your firewall and anti-virus program to make your system vulnerable for other threats.
  • You may be fooled by the its words but lose your money without getting back your encrypted files.
  • Your other machines may be affected and your other files may be encrypted if you don't remove it.
  • Your confidential information may be collected and abused by it.

How to effectively remove CTB-Locker?


Method 1: Manually remove it yourself by following the guides below.
Method 2: Automatically remove it by using SpyHunter.

Manual Steps


Although there are manual steps, we actually don't recommend you to take those steps. CTB-Locker is so powerful and it should be removed with a powerful anti-virus program.

Step 1: Restart the computer and enter Safe Mode.

Restart your PC and keep pressing F8 key before Windows launches. When you get to the interface, please select "Safe Mode with Networking" and then press "Enter" on your keyboard.


Step 2: Stop all the harmful processes of CTB-Locker.

Press Ctrl+Alt+Del keys simultaneously to quickly get to the interface. In the Processes section, seek for all ongoing related or suspicious programs and right click all the harmful processes to end them.



Step 3:Show hidden files on your PC and then delete the malicious ones.
Start button>>Control Panel>>Appearance and Themes>>Folder Options.
In view tab, tick "Show hidden files and folders" and deselect "Hide protected operating system files (Recommended)". And then click "Apply". Since all the related hidden files have been shown, you can go to local disk C or other place to search for them and delete them.


%CommonAppData%\<random>.exe
C:\Windows\Temp\<random>.exe
%temp%\<random>.exe
C:\Program Files\<random>

Step 4: Delete vicious entries of CTB-Locker. (Be cautious during this step.)

Click Start and find Run. Input "regedit" and then click "OK". Then there comes the Registry Editor. Find out all the harmful keys and right click to remove them.



HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "<random>" = "%AppData%\<random>.exe"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "<random>" = "%AppData%\<random>.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings

Automatic Steps


SpyHunter is a real-time anti-spyware program with the function of removing ransomeware, Trojan horses, rootkits, worms, and adware, etc. With good reputation, SpyHunter is used by numerous of people all over the world every day. It works well and it's compatible with existing security program without conflicts. Download this wonderful tool to smash CTB-Locker now!

You may also need to enter Safe Mode here.

Step 1: Click the download icon to download and install SpyHunter.


Step 2: Follow the install guide to install SpyHunter on your PC properly.



Step 3: Launch SpyHunter and click "Malware Scan" to have a full scan for your computer.


Step 4: When the scan is over, tick "Select All" and click "Fix Threats" to clean up all viruses and invaders.



Optional steps to check and optimize your PC


To improve the performance of a PC, we need to fix the Registry Errors and system rubbishes. RegCure Pro is a specialist in this field. Fragmented Core Operating, System FilesFragmented Files on Hard Drive,  and Accumulated Junk File Clutter are all can be cleaned by RegCure Pro.

The following steps are for your reference.

Step 1: Click the safe link here to download RegCure Pro!

(Downloading removal tool from here authorized by relevant official site won't worry you. This can also help you avoid getting pirate software or other malware accidentally.)


Step 2: Double click to run the downloaded file and click next to install RegCure.




Step 3: RegCure will automatically open on your screen. You just need to make a System Scan for computer errors.


Step 4: Choose the item you want and click "Fix All" to get rid of the harmful parts.


Some tips you may need


Since there is no other ways to decrypt the encrypted files, you probably need the two tips below.

1. Backups.
A local or cloud-based backup may be very helpful. Once your files are encrypted, you can get them back through this way.

You should develop a habit to back up your important files to different places in a regular time.

2. Use file recovery software.
Software like R-Studio or Photorec may be helpful.

3. Avoid bad surfing habits.
Never visit questionable websites. Never click links with emails and not to divulge your personal information online.
Be wary of attachments of an email from an unknown person.

4. Get a wonderful removal tool.
Get a reliable protector like SpyHunter to safeguard your PC. Always update it with the latest version. Software like RegCure may also help you with the left problems. When facing CTB-Locker, tools can be very helpful.

For related information, please click here:

How to Remove Crypto wall 3.o Ransomware Step by Step?

1 comment:

  1. Been using Kaspersky security for a number of years, and I recommend this product to all you.

    ReplyDelete