Windows Problems Help Center

Tuesday, November 18, 2014

How Can I Get Rid of keybtc@inbox_com - Useful Tips for Encrypted Virus

Recently, many computer users comlained that their computer is infected with the virus related to keybtc@inbox_com:

Yesterday I got an e-mail with FedEx logo. As I expected some delivery, opened it. There was a zip attachment that I opened. It seemed unrelevant so I deleted the mail. Afternoon I noticed that lots of my files (but not all) got corrupted: jpg, xls, xlsx, pdf, doc, rtf and rar files were renamed like inst1518_2.rar.keybtc@inbox_com (after the extension the .keybtc@inbox_com was added and the file cannot open even after renaming it to the original name.

I'm also infected with that malware. Can you help me to remove it from the computer and restore all the files it infected. The files which are infected are: *.JPG it changed into *.JPG.keybtc@inbox_com, *.DOC that changed to *.doc.keybtc@inbox_com, *.rar that changed to rar.keybtc@inbox_com.

Here in this post, you may get some useful information and tips about how to get rid of this keybtc@inbox_com virus.


Information about Keybtc@inbox_com


Similar to Decode@india.com, Keybtc@inbox_com is a dangerous ransomware virus. This virus is capable to encrypt your files and data by changing all the your files to .keybtc@inbox_com. This ransom virus usually comes from link in spam email or attachment with the zip file. This email usually pretends to be a legit email from well-known resources. Malware authors often use tricks to try to convince you to download malicious files. This can be an email with a file attached that tells you it is a receipt for a delivery, a tax refund, or an invoice for a ticket. It might say you have to open the attachment to get the items delivered to you, or to get money.

Once your computer is infected with this keybtc@inbox_com virus, it will change the computer setting and encrypt your files. You will be asked to pay money in Bitcoin to get the key to recover your files. However, you'd better not believe in it, there is no guarantee. It is recommended to remove Keybtc@inbox_com immediately from your computer. And it is highly suggested to download and install a powerful and legitimate anti-spyware like Spyhunter to scan and protect your computer.

Instructions to Get Rid of Keybtc@inbox_com


Method 1: Keybtc@inbox_com  Manual Deletion

Boot up the infected computer, press F8 at the very beginning, choose “Safe Mode with Networking” and press Enter to get in safe mode with networking.



Step 1Open Windows Task Manager and close all running processes.
( Methods to open Task Manager: Press CTRL+ALT+DEL or CTRL+SHIFT+ESC or Press the Start button->click on the Run option->Type in taskmgr and press OK.)


Step 2 : Go to the Registry Editor and remove all the infection registry entries listed here:

(Steps: Hit Win+R keys and then type regedit in Run box to search)



HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes"=".zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation"=1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger"="svchost.exe"











Step 3: All the infection associated files listed below need to be removed:

%CommonAppData%\<random>.exe
C:\Windows\Temp\<random>.exe
%temp%\<random>.exe
C:\Program Files\<random>


Method  2: Automatic Removal with SpyHunter

SpyHunter is a world-famous real-time malware protection and removal tool, which is designed to detect , remove and protect your PC from the latest malware attacks, such as Trojans, worms, rootkits, rogue viruses, browser hijacker, ransomware, adware, key-loggers, and so forth. To keep SpyHunter Anti-malware on your computer is an important way to protect your computer in a good condition. Please find the instruction as follow.

Boot up the infected computer, press F8 at the very beginning, choose “Safe Mode with Networking” and press Enter to get in safe mode with networking.



Step 1: Press the following button to download SpyHunter.


Step 2: Save it into your computer and click on the Run choice to install it step by step.



Step 3: Click Finish then you can use it to scan your computer to find out potential threats by pressing Scan computer now!

Step 4: Tick Select all and then Remove to delete all threats.


Guide to download RegCure Pro to optimize PC 


If you are still worried about the left over of Keybtc@inbox_com and want to clean all the unwanted registry entries,  it is recommended to use RegCure Pro.

A: At first, boot your computer into Safe Mode with Networking.

To perform this procedure, please restart your computer and keep pressing F8 key until Windows Advanced Options menu shows up, then using arrow key to select “Safe Mode with Networking” from the list and press ENTER to get into that mode.

safe mode with networking

B: Follow the below guide to continue.

Step 1. Install and launch RegCure Pro on your PC.



Step 2.  Select "Yes" to download and install RegCure Pro.

 

Step 3. Click "Next" to continue.


Step 4. RegCure Pro will open automatically on your screen.

RegCure Pro

 Step 5. RegCure Pro is scanning your PC for error.

 RegCure Pro2

Step 6. After scanning, choose the issues you want to fix. 

 

Note: Manual removal Keybtc@inbox_com refers to key parts of computer system. Any error step may lead to system crash. If you don’t have sufficient expertise in dealing with the manual removal. Install Spyhunter can be your better choice, because it is capable of auto-detecting and removing viruses. You can also Download RegCure Pro to help you optimize the computer.



No comments:

Post a Comment