Page 1 of 2 12 LastLast
  1.    10 Sep 2015 #1
    Join Date : Oct 2014
    Posts : 403
    Windows 10 X64

    Encryption of personal files with CTB-Locker


    https://www.pcrisk.com/removal-guide...ncrypted-virus

    So my friend has this problem and i would like to give him good advice.

    Anyone here that had this problem before?

    My friend is on Windows 10.

    Thanks

    jeff
      My ComputerSystem Spec
  2.    10 Sep 2015 #2
    Join Date : Jul 2015
    Posts : 3,655
    10 Pro

    Looks like your link is good advice. Remove the virus and restore your files from backup. If you haven't any backup you have to decide whether to risk paying the ransom or not as you can't decrypt the files. I wouldn't pay for sure.
      My ComputerSystem Spec
  3.    10 Sep 2015 #3
    Join Date : Oct 2014
    Posts : 403
    Windows 10 X64
    Thread Starter

    Well Halasz,

    He did take B-U's on another computer which is infected too.......

    He also bought already another drive where everything has to be put on again, except his photo's of his children, which are gone.

    Does not want to take the risk, that even formatting the drive would not erase everything.

    Even System Restore did not work.

    Jeff
      My ComputerSystem Spec
  4.    10 Sep 2015 #4
    Join Date : Jul 2015
    Posts : 3,655
    10 Pro

    That is really unfortunate. System restore wouldn't work, no - restore points only hold OS data - not backups of personal files. I'm afraid that there isn't really a solution. You wouldn't want your name on their list of people who pay ransoms I don't think.
      My ComputerSystem Spec
  5.    11 Sep 2015 #5
    Join Date : Oct 2014
    Posts : 403
    Windows 10 X64
    Thread Starter

    Well Halasz,

    i have enough back-ups taken everyday to avoid that.

    But my friend did only take one....

    It was a long shot to ask it , since he already had taken his pc to a store and they could not help him either.

    But thanks

    Jeff
      My ComputerSystem Spec
  6.    16 Sep 2015 #6
    Join Date : Apr 2015
    Posts : 12,600
    W10Prox64

    Quote Originally Posted by jeffrys View Post
    https://www.pcrisk.com/removal-guide...ncrypted-virus

    So my friend has this problem and i would like to give him good advice.

    Anyone here that had this problem before?

    My friend is on Windows 10.

    Thanks

    jeff
    Hi.
    Here are instructions for removing CTB Locker.

    Please be absolutely sure this is what you have, and not some other encryption software, because some of them have been cracked, and people have been able to get their files back without paying.

    I would not pay any ransom. There is a good chance that you will just lose the money.

    Please have your friend backup his encrypted files/photos to a spare drive and store it away, in case something breaks in the future. Find the threads at BleepingComputer which address his particular infection, read them thoroughly, and subscribe to them for future updates.

    Install CryptoPrevent to help thwart these encryption infections in the future, in addition to your normal anti-virus.
      My ComputerSystem Spec
  7.    16 Sep 2015 #7
    Join Date : Apr 2015
    Posts : 12,600
    W10Prox64

    It appears that when CTB Locker encrypts a file it first makes a copy of it, encrypts the copy, and then deletes the original. Due to this you can may be able to use a file recovery software such as R-Studio or Photorec to recover some of your original files. It is important to note that the more you use your computer after the files are encrypted the more difficult it will be for file recovery programs to recover the deleted un-encrypted files.
      My ComputerSystem Spec
  8.    17 Sep 2015 #8
    Join Date : Oct 2014
    Posts : 403
    Windows 10 X64
    Thread Starter

    Thanks Simrick,

    yes i told him to use an external USB drive AND a USB-stick. He can plug in the stick, take the B-U, remove the stick.

    So then he has 2 B-U's. He can let the B-U program run, to put his photo's and so one on the server he has. This as an extra.

    No he is not going to pay and he showed me the problem.
    It is the CBT Locker.


    They should put them in jail for that.

    Jeff
      My ComputerSystem Spec
  9.    17 Sep 2015 #9
    Join Date : Apr 2015
    Posts : 12,600
    W10Prox64

    Quote Originally Posted by jeffrys View Post
    Thanks Simrick,

    yes i told him to use an external USB drive AND a USB-stick. He can plug in the stick, take the B-U, remove the stick.

    So then he has 2 B-U's. He can let the B-U program run, to put his photo's and so one on the server he has. This as an extra.

    No he is not going to pay and he showed me the problem.
    It is the CBT Locker.


    They should put them in jail for that.

    Jeff
    Hi Jeff,
    Did you see the info in my post #7 above? He may be able to run a file recovery program to get some of his deleted files back. It's worth a shot.

    Yeah, these rats should be in jail!
      My ComputerSystem Spec
  10.    17 Sep 2015 #10
    Join Date : Oct 2014
    In a house with a crazy cat trying to kill me
    Posts : 16,268
    Win 7 32, Win 7 64 Pro, Win 8.1 64 Pro, Win 10 64 Education Edition

    Not that it helps now, but in the future consider making a system image on a regular basis & keep it on an external drive that is not always connected to the PC/Laptop. Locker viruses are widespread now & the a system image is a good safeguard. Keep 3 or 4 prior backups in case you inadvertently make one with a virus.

    System Image - Create in Windows 10 - Windows 10 Forums

    Even if you do pay the ransom, there is no guarantee you will get the decryption key.
      My ComputerSystem Spec

 
Page 1 of 2 12 LastLast


Similar Threads
Thread Forum
Windows Phone Device Encryption - Turn On or Off for Windows 10 Mobile Phone
How to Turn On or Off Device Encryption for your Windows 10 Mobile Phone Device encryption helps protect your files and folder on your Windows 10 Mobile phone from unauthorized access in case your phone is lost or stolen. This tutorial will...
Tutorials
Encryption Enabled By Default or Not?
Hello, all! I installed Windows 10 on Wednesday. I remember one of the notifications that came up was asking me if I wanted to back up my encryption key. I'd like to know, is Windows 10 encrypted by default? I read around, and it sounds like...
AntiVirus, Firewalls and System Security
Solved Does Choosing 'Keep personal Files only' remove installed apps?
What I mean is, if I select to keep my personal files only, will the installed programs be removed completely from my hard drive, or will they be moved to the Windows.Old folder like what happens in Windows 7 or Windows 8/8.1 ? Because I would...
Installation and Upgrade
HTTP 2.0 wins approval: Road to better encryption?
Read more: HTTP 2.0 wins approval: Road to better encryption? | ZDNet
Windows 10 News
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 06:52.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums