Severity scale:  

Critroni Ransomware. How to remove? (Uninstall guide)

removal by Jake Doevan - -   Also known as Critroni virus, 'Your personal files are encrypted' virus | Type: Ransomware

What is Critroni virus?

Critroni is a very dangerous ransomware that can easily infect your computer, encrypt your files and try to swindle money from you in exchange for the decryption key. This ransomware is relatively new, so there is no surprise that there isn’t much information about it. However, it looks like this ransomware works very similarly to a well-known viruses that are called Cryptolocker and Cryptowall. In fact, Critroni virus can be called a copy of these threats. If this malicious intruder infiltrates computer, it scans the system for specific files and then encrypts then. After that, you will discover that these files are blocked and that you can’t open them. Instead of that, this threat will show you a step-by-step guide on what you should do in order to recover your encrypted files. This guide is very precise and even explains how to download Tor, how to pay the ransom using Bitcoints and gives similar instructions. Please be very careful with this threat and think twice whether it is worth making this payment or not because hackers might fail to unblock your files after getting your payment. In order to remove this ransomware, which is also known as CBT-Locker and Critroni.A, you should scan your computer with updated Reimage. In addition, for recovering the connection to your files, you should try using R-Studio or Photorec.

What is the main thing showing that your computer has already been affected Critroni? It’s this warning message that shows up after trying to open any of your important files.

Your personal files are encrypted

Your documents, photos, databases and other important files have been encrypted with strongest encryption and unique key, generated for this computer.

Private decryption key is stored on a secret Internet server and nobody can decrypt your files until you pay and obtain the private key.

You only have 72 hours to submit the payment. If you do not send money within provided time, all your files will be permanently crypted and no one will be able to recover them.

Press ‘View’ to view the list of files that have been encrypted.

Press ‘Next’ to connect to the secret server and follow instructions.


How can Critroni virus infect my computer?

Normally, such viruses as ransomwares, trojans, malwares and rogues travel around with a help of spam. In most of the cases, such misleading emails claim that user needs to update the attachment and check what is said in it. Of course, you should never open such attachment if you don’t want to download this ransomware to your computer. Nevertheless, at the moment of writing, Critroni ransomware is also actively spread using fake alerts offering free updates. In most of the cases, people are offered to update their Java, Flash Player, FLV Player, web browser or similar program. We have noticed lots of fake alerts spreading around at this moment, so you should be very careful with them. The safest way to deal with them is to close them. You may also need to leave a website that shows it for you. Otherwise, you can easily download Critroni to your computer. What is more, it looks like cyber criminals, who are responsible for releasing Critroni ransomware, are trying to sell their dubious creation in the black market. So, it is possible that this ransomware may become very popular among scammers and cyber criminals.

To sum up, Critroni virus is one of the most dangerous ransomwares that are spread around at this moment. It is very hard to remove this ransomware from the system and it’s even much harder to recover the encrypted files. In order to remove this malicious infection, you should rely on a reliable and updated anti-spyware program. Fortunately, there are several programs that can be used for decrypting encrypted files. For avoiding this threat, please be careful with unsafe websites, avoid opening suspicious email attachments, and avoid downloading unfamiliar programs.

How to remove Critroni Ransomware from my computer?

Usually, users can restore their files from the system backup or using file recovery tools. If you have been performing backups, you should be capable of restoring your files. In addition, for that you can also try such programs as R-Studio or Photorec. Of course, you shouldn’t forget that you must remove Critroni files from the system. You can do that by running a full system scan with any of these applications: Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus, Malwarebytes Anti Malware or another reputable anti-spyware program.

We highly recommend thinking about the prevention of such infections. For that, you can use previously mentioned programs. What is more, it is also recommended to store your most valuable files in an online storing place or use a safe USB/external HDD/CD or DVD.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Critroni Ransomware you agree to our privacy policy and agreement of use.
do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Critroni Ransomware. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.
More information about this program can be found in Reimage review.
Press mentions on Reimage
Critroni Ransomware snapshot
Critroni Ransomware snapshot

Manual Critroni Ransomware Removal Guide:

Remove Critroni Ransomware using Safe Mode with Networking

  • Step 1: Reboot your computer to Safe Mode with Networking

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Safe Mode with Networking from the list Select 'Safe Mode with Networking'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Networking in Startup Settings window. Select 'Enable Safe Mode with Networking'
  • Step 2: Remove Critroni Ransomware

    Log in to your infected account and start the browser. Download Reimage or other legitimate anti-spyware program. Update it before a full system scan and remove malicious files that belong to your ransomware and complete Critroni Ransomware removal.

If your ransomware is blocking Safe Mode with Networking, try further method.

Remove Critroni Ransomware using System Restore

  • Step 1: Reboot your computer to Safe Mode with Command Prompt

    Windows 7 / Vista / XP
    1. Click Start Shutdown Restart OK.
    2. When your computer becomes active, start pressing F8 multiple times until you see the Advanced Boot Options window.
    3. Select Command Prompt from the list Select 'Safe Mode with Command Prompt'

    Windows 10 / Windows 8
    1. Press the Power button at the Windows login screen. Now press and hold Shift, which is on your keyboard, and click Restart..
    2. Now select Troubleshoot Advanced options Startup Settings and finally press Restart.
    3. Once your computer becomes active, select Enable Safe Mode with Command Prompt in Startup Settings window. Select 'Enable Safe Mode with Command Prompt'
  • Step 2: Restore your system files and settings
    1. Once the Command Prompt window shows up, enter cd restore and click Enter. Enter 'cd restore' without quotes and press 'Enter'
    2. Now type rstrui.exe and press Enter again.. Enter 'rstrui.exe' without quotes and press 'Enter'
    3. When a new window shows up, click Next and select your restore point that is prior the infiltration of Critroni Ransomware. After doing that, click Next. When 'System Restore' window shows up, select 'Next' Select your restore point and click 'Next'
    4. Now click Yes to start system restore. Click 'Yes' and start system restore
    Once you restore your system to a previous date, download and scan your computer with Reimage and make sure that Critroni Ransomware removal is performed successfully.

Finally, you should always think about the protection of crypto-ransomwares. In order to protect your computer from Critroni Ransomware and other ransomwares, use a reputable anti-spyware, such as Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware

About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Jake Doevan
About the company Esolutions

Removal guides in other languages

  • Hugo Gutierrez

    I do not speak much english. I restored all my files with Shadow Explorer 0.9 it is a free software, very effective.

  • Larry

    this virus gets into the root directories and encrypts most MS Office files. It renders Outlook inoperative as well as all pdfs, excel files, jpgs, txt and doc files. It also goes into the boot registries. Once removed is there anyway to restore the encrypted files? It looks like I am going to need to totally reformat and rebuild the hard drive at this point suffering a near total loss of all data.

    • Hugo

      Use Shadow Explorer 0.9 its a free software, very effective. it worked for me. (bad english)