HOW TO DELETE CERBER VIRUS FROM PC ?

BismaBisma
edited May 2016 in General Privacy Discussion
Hello. I found this Forum because my PC is blocked by a CERBER VIRUS (I think). All my documents and my Master work is blocked. On the virus-entferner Site I found an Information about this virus: http://www.virus-entferner.de/2016/05/02/cerber-ransomware-virus-entfernen/  My question is: can I decrypt my documents with the help of Emsisoft Antimalware? What tools can you recomend me in my situation? Thanks for help.


Comments

  • OmniNegroOmniNegro
    I do not understand enough Dutch to really be able to answer that based upon the page you linked in, but often times ransomware will simply *NEVER* give you your content back regardless of what you do and who you pay.

    The fact that they infected your system already and are holding your documents hostage means they hold all the cards. You can either pay them and support this form of terrorism, or learn a hard lesson and rebuild from scratch and keep regular, disconnected backups of everything you would fear losing.

    I keep a backup hard drive disconnected at all times, and only backup things on it when booted to a live disc like Linux Mint. That way, even if I was infected, the infection is never active when I mount my backup drive.

    Back to your current problem, one of the few words I recognized on the Dutch page was AES. And if that is how they are encrypting your documents, it will be plainly impossible to decrypt without them providing the password.

    Here is a document that explains how plainly impossible brute force decryption of a 128 bit AES key is.
    http://www.eetimes.com/document.asp?doc_id=1279619
  • madfrogmadfrog
    I doubt that you can decrypt files infected with Cerber using Emsisoft Antimalware because it encrypting files with an AES algorithm. Cerber ransomware is very nasty and tricky, found here that the new version is way more dangerous than previous!  As for me - the only way to be protected from different lockers is to make regular backups and to keep then offline.
  • MarySelinaMarySelina
    Hi, you can follow this article to get the solution to decrypt your infected documents. It is helpful. Ceber ransowmare is the most stubborn malware. To avoid infected again, follow this guide to protect yourself.
  • JStephensJStephens
    Hello, Bisma!
    Unfortunately, you can't decrypt your files using ANY anti-malware or anti-virus program. Suchlike files might be decrypted only with help of special decryption tools. If you got the Cerber virus (version 1), it can be decrypted by  TrendMicro decryptor. If you have another version (2, 3 or 4) - there's no way to decrypt files for now. But I hope that this article will help you to solve your problems in future, and when there will be a decent decryptor - the article wil be updated.
  • casrumnkenacasrumnkena
    It is said that there is no decryptor for cerber virus right now. You can try removing it first and then use files recovery tool to get back your files.

  • hermanherman
    Your best resource may be https://www.bleepingcomputer.com
    If they don't know how to handle this nobody knows.
    When there is no removal method: do a bare metal installation of your OS and restore your data from a backup.
Sign In or Register to comment.