Cryptorbit ransomware is an infection that locks the screen of the compromised machine and denies access to the desktop until a fee has been paid. Cryptorbit has practically the same behavior as other known ransomware like CryptoLocker and Prison Locker, but unlike other types of ransomware, Cryptorbit does not accuse the victim of any crimes. Instead, it displays a message, demanding a fine in order to unlock the affected computer.
Cryptorbit – Distribution and Infection
Experts claim to have spotted the threat back on September 2013. Although Cryptorbit is quite similar to CryptoLocker, the both ransomware infections have not been created by the same authors.
Cryptorbit is usually delivered via spam email attachments or links to corrupted websites. Cryptorbit also uses social engineering techniques quite skillfully for its distribution. Users are advised to be extra cautious and keep their AV software up-to-date.
Like a typical ransomware infection, upon installation Cryptorbit locks the screen of the compromised PC and displays a ransom message containing the following information:
“YOUR PERSONAL FILES ARE ENCRYPTED
All files including videos, photos and documents, etc. on your computer are encrypted.
Encryption was produced using a unique public key generated for this computer. To decrypt files, you need to obtain the private key.
The single copy of the private key, which will allow you to decrypt the files, located on a secret server on the Internet; the server will destroy the key after a time specified in this window. After that nobody and never will be able to restore files.”
The ransom demanded varies from $50 to $500 and has to be paid via the Tor Browser. The problem is that even if the victim pays the fine, there is no guarantee that the machine will be unlocked and the files – decrypted.
Cryptorbit’s Safe Removal
Cryptorbit can be deleted with the assistance of a competent anti-malware program. You need to bypass the screen lock by starting your PC in SafeMode. Your system restore utility will help you restore the encrypted files. New Restore points are usually created with every new software update.
Just follow the steps provided below to delete Cryptorbit from your computer permanently.
Spy Hunter FREE scanner will only detect the threat. If you want the threat to be automatically removed, you need to purchase the full version of the malware tool. Find Out More About SpyHunter Anti-Malware Tool