x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF

Technical Support

Need help?

 

CTB Locker/Critroni ransomware file encryption

Information applies to:

Products
Todos los productos

Symptoms

After receiving an email and executing the zipped attachment, all the images and documents in my computer are encrypted and rendered unusable. Furthermore, the desktop background is replaced by the following screen and a ransom is requested in order to retrieve the original files.

CTB Locker screen

Can my files be recovered?

CTB Locker/Critroni may not always remove the volume shadow copy (VSS), so, if your operating system is Windows Vista or higher, it might be possible to retrieve a copy of the files affected by malware. Please follow the steps below:

  1. Download and install the following software:
    http://www.shadowexplorer.com/downloads.html
  2. Once installed, browse to the location where the affected files are.

    Shadow copies
  3. Select a date prior to the infection.

    Shadow copies 2
  4. Select the affected file or folder, and choose the option Export.

    Shadow copies 3

This procedure may let you recover previous versions of the affected files.

How to avoid Ransomware infections

Panda Security solutions detect and block this type of malware. In any case, please bear in mind the following advice:

  • Keep the operating system updated to avoid security breaches.
  • Have your antivirus installed and updated.
  • Do not open emails or files coming from unknown senders.
  • Avoid browsing unsafe pages or non-verified content.

For further information, check article 4 Essential Tips to Prevent Virus Infections.

Help nÂș- 20150126 1687 EN

Have you resolved your query with this article?

yes no

Thanks for your answer


Why didn't you find it helpful?


The instructions are too complex.
The instructions are too long.
The instructions don't work.
I'd rather have a video.
Other reasons.




Talk to a technician!

 

Business hours: Mondays-Fridays 9:00 to 18:00 CET

Outside business hours, please use the online form.





ALWAYS ONLINE TO HELP YOU TWITTER FORUM RATE US CHAT
ALWAYS ONLINE TO HELP YOU TWITTER FORUM RATE US CHAT