Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

personal files encrypted by CTB-Locker


  • This topic is locked This topic is locked
1 reply to this topic

#1 kplah3

kplah3

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:07:17 PM

Posted 24 May 2015 - 08:43 PM

My 11 year olds Compaq laptop running 8.1 has been infected by what I guess you'd call a ransom virus. The desktop screen has "Your personal files have been encrypted by CTB-Locker" running across the top and then instructions on how to pay before time runs out. Which it already has. We have none of the files backed up. The only files we are really concerned about retrieving are the photos which we can't access now. Is there any thing that can be done? I'd appreciate any help and advice that is offered. Thanks in advance.



BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:17 PM

Posted 25 May 2015 - 05:30 AM

A repository of all current knowledge regarding CTB Locker and Critroni Ransomware is provided by Grinler (aka Lawrence Abrams), in this topic: CTB Locker and Critroni Ransomware Information Guide and FAQ

Reading that Guide will help you understand what CTB Locker (Critroni) does and provide information for how to deal with it. At this time there is no fix tool and no way to retrieve the private key that can be used to decrypt your files without paying the ransom.

More information in these articles:At this time there is no fix tool and unfortunately, still no known method to retrieve the private key that can be used to decrypt your files since there is no way to retrieve the private key that can be used to decrypt your files without paying the ransom. With dual infections, that means paying both ransoms.

There is also an ongoing discussion in this topic: CTB Locker or DecryptAllFiles.txt Encrypting Ransomware Support & Discussion.

Rather than have everyone start individual topics, it would be best (and more manageable for staff) if you posted any questions, comments or requests for assistance in that supporttopic discussion. Doing that will also ensure you receive proper assistance from our crypto malware experts since they may not see this thread. To avoid unnecessary confusion...this topic is closed.

Thanks
The BC Staff
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users