Skip to content
  • Active
  • Severity: High
  • Ransomware
  • Windows
  • Verified · Dec 2016

How to remove Cryptorium ransomware virus

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Olivia Morelli · Ransomware analyst

Cryptorium ransomware spreads via software cracks

Malware analysts know very well that the majority of viruses spread along pirated software[1]. In this case, Cryptorium virus proliferates with the help of an illegal version of FIFA 2017. Once the malicious file reaches the computer, it doesn’t waste any time and starts encrypting victim’s files right away. The virus isn’t unique, and, just like the majority of ransomware, it renders files useless by encoding them with AES-256 cipher[2]. Files that get corrupted with this particular encryption become worthless, as the victim can no longer open, edit, or do anything with them. Be aware that the Trojan encrypts documents, videos, music, and other files and makes only a few exceptions. Once it finishes the filthy encryption task, it triggers a Cryptorium program window, which displays the following message for the victim:

OH NO, YOU HAD BAD LUCK TODAY. ALL YOUR FILES ARE ENCRYPTED!
BUT! I HAVEN’T DELETED THEM YET! PURCHASE A “GBO KEY” TO DECRYPT YOUR DATA, OR ALL ENCRYPTED FILES WILL BE PERMANENTLY DELETED WITHIN 32H, AND THEN THERE IS NO WAY TO RECOVER!
BE QUICK OR NO FILES!

Below the main message, there is a footnote that says “all servers are down at the moment! You have to find it out ! The gbo keys are all generated randomly!” Therefore, if Cryptorium servers are down, it means that you will not be able to get the decryption key even if you fulfill all culprits’ wishes. If you have been attacked by this malevolent software, we suggest you remove Cryptorium virus using FortectIntego or another strong virus remover. Once you’ve done with Cryptorium removal, read data recovery instructions provided below the post.

Cryptorium ransomware attack captured

How did I get infected with this ransomware?

The most important thing regarding malware distribution is the fact that such programs almost always are strongly obfuscated, and it is unlikely that nowadays you will receive a file called virus.exe that will corrupt your system. Developers of malicious software have stepped up their game, and now they deliver malicious viruses via JS, Word, and other files[3]. Therefore, you should stay away from ANY suspicious-looking file that someone tries to send you via email or instant messaging app[4]. What is more, you should also keep all programs up-to-date because cyber criminals manage to exploit vulnerabilities in an outdated software very easily – you just need to accidentally visit a website that hosts an exploit kit[5]. Also, it is a good idea to avoid these ads that suggest your desired products for an unbelievably low price – you might be scammed and tricked into entering a malicious website. Finally, you can install such malware alongside untrustworthy programs and of course alongside illegal software versions or tools used to crack down legal ones. In general, you should follow your common sense and think before clicking/installing any content that you encounter on the Internet.

What is the best way to remove Cryptorium virus?

If you want to clean the computer from this virus and its remains, we suggest you use anti-malware program. Bear in mind that ransomware is a very dangerous virus and it can severely damage the system or make it vulnerable to further malware attacks (in case you fail to remove it properly). Therefore, we suggest you remove Cryptorium virus with FortectIntego or SpyHunterCombo Cleaner. If you’re looking for data recovery options, find them below Cryptorium removal guide.

Did this guide help?

3 comments

  1. sabrina

    Im so glad I had a backup.... so glad...

  2. Mirabelle

    Lucky you... i didnt! here I am, crying over those lost files

  3. Nate

    No need to cry over lost files. Theyre just files. Besides, if you checked your USBs, mail, and other places, I bet you could find lots of files that you used to keep on your computer.

Spyware News
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.