How to remove Cerber 4.1.5 ransomware virus

Yet Another variant of Cerber – Cerber 4.1.5 ransomware virus has been released

The appearance of Cerber 4.1.5 virus shows that Cerber ransomware authors are focusing on quantity, but not the quality of new versions of this virus. For some reason, over the past few weeks they have released even 4 new modifications of the fourth virus version that hardly differ from each other. The Cerber 4.1.0, Cerber 4.1.1, Cerber 4.1.4 and finally the fifth ransomware version (no complaints regarding 4.1.2 and 4.1.3 versions reached us so far) encrypt files using same cryptography and leave the same ransom note on victim’s computer. All these versions change victim’s desktop background with a picture that says what virus has affected the computer, and provide URLs to personal payment websites where the victim can get more information about the infection and learn how to pay the ransom. The virus also saves README.hta file into every folder that contains encrypted data, which launches a window “Cerber Ransomware Instructions.” This screen explains that files have been encrypted, and they are not damaged- just “secured.” In order to retrieve them, the victim has to pay a ransom, the ransom note says. It also contains links leading to “personal page.”

Cerber 4.1.5 virus, just like the previous three versions, distorts filenames by replacing original ones with 10 random chars and also removes the original extension and appends 4 random chars instead of it. For example, if the virus encrypts a file named DCM_0182.jpg, it can become named similarly to this: YhapFV86Ax.tf6a. In addition to that, we must state that every file gets a different name, but all of them get the same file extension. Sadly, we have to say that there are to decryption tools capable of repair corrupted files – only authors of this virus have this power. They understand that victims agonize over lost files and seek to retrieve them, so they suggest a compromise – pay a ransom, get your files back. Virus asks for 0.6967 BTC, which is approximately $500, or more if you cannot collect this sum of money within the given period of time. We strongly recommend you to refuse to comply with such requirement. Although they might have the decryption key that can fix your files, there is no guarantee that they are willing to give it to you. Therefore, it is highly recommended to eliminate this virus as soon as possible. It is better to remove Cerber 4.1.5 ransomware automatically, because a professional malware removal tool can locate and kill all components of the virus and other malware-related files on the entire system, whereas it can take half a day to do that manually. For Cerber 4.1.5 removal, we advise using the FortectIntego software.

Infiltration methods

Various distribution techniques help Cerber virus proliferate. Mostly, it reaches victims via malware-laden email letters that carry infectious attachments. If the victim gets convinced to open them, malware easily roots into the system and starts encrypting files right away. Symptoms of infection are usually not noticeable – the computer becomes slower for a while, but PC slowdowns hardly bother computer users that much. As a result, all personal data gets encrypted. To avoids such situation, do not open emails that come from unknown persons or individuals that pretend to be working at well-known companies but send “official” letters from suspicious-looking email addresses.

The fourth generation of Cerber is known to be distributed via PseudoDarkleech campaign, which delivers ransomware through compromised Internet websites. PseudoDarkleech either injects link leading to RIG exploit kit to affected websites or reroutes users to a redirect server that points to the same exploit kit. Cerber is also reportedly distributed with the help of Neutrino exploit kit. Such attacks can be prevented only with an up-to-date and reliable anti-malware software.

How to remove Cerber 4.1.5?

Please understand that this virus is a severe and malignant computer program that is designed to take your personal files away illegally. To remove Cerber 4.1.5 virus, it is HIGHLY advisable to use a strong anti-malware software. This malware example alters Registry keys and adds a significant number of new files to the system, which are hard to detect and remove, especially if you are not an IT expert. For Cerber 4.1.5 removal, use one of the suggested malware removal tools, but before doing it, start the machine in a specific way as explained below.