CTB-Locker (Critoni) virus

Posted on 2014-09-24
Last Modified: 2014-11-01
I have  a computer (win 7) with this virus on it. How can I get it removed and files unencrypted?
Question by:dawn1993
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
LVL 76

Accepted Solution

Alan Hardisty earned 500 total points
ID: 40343344
2 Ways to resolve this:

1. Pay the ransom
2. Restore the files from backup

No other way exists unfortunately.

Removal should be relatively easy if you read this blog:

Author Comment

ID: 40351025
Thanks for your response. I looked on the web and bleeping computer has a thread going on decrypting the files. I am waiting on someone to figure out how to do it. I refuse to pay the ransom.
LVL 76

Expert Comment

by:Alan Hardisty
ID: 40351041
Totally understand your feelings with not wanting to pay.  Do you have a backup to recover from, or are you waiting for someone to figure out how to de-crypt the files?

Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.


Author Comment

ID: 40351455
I am waiting. It is not urgent. I reinstalled Windows on another hard drive and can wait this out. I am hoping in time that  someone is able to help me. I do have some of the files backed up so it is not to bad for me.

Thanks for your help.
LVL 76

Expert Comment

by:Alan Hardisty
ID: 40351638
No problems - I'll keep my fingers crossed.  Do you have Shadow Copies Enabled?
LVL 59

Expert Comment

ID: 40417111
I've requested that this question be deleted for the following reason:

Not enough information to confirm an answer.

Author Comment

ID: 40414906
Please close it!

LVL 76

Expert Comment

by:Alan Hardisty
ID: 40417112
Why isn't my comment sufficient as an answer?

Featured Post

[Webinar] Code, Load, and Grow

Managing multiple websites, servers, applications, and security on a daily basis? Join us for a webinar on May 25th to learn how to simplify administration and management of virtual hosts for IT admins, create a secure environment, and deploy code more effectively and frequently.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Copy delete file if connection drops. 2 57
WMIC Output Formatting 1 81
Why does my Dell Precision tower 5810 not boot? 13 98
bitlocker- locked out 8 45
When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
I've been an avid user and supporter of Malwarebytes Premium Version 2.x for years. It's an excellent product that runs alongside just about any Anti-Virus application without issues. It seems to have an uncanny ability to pick up many things that A…
This Micro Tutorial will give you a basic overview of Windows Live Photo Gallery and show you various editing filters and touches to photos you can apply. This will be demonstrated using Windows Live Photo Gallery on Windows 7 operating system.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

736 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question