How to remove Cerber Ransomware (Removal Guide)

This Cerber ransomware removal guide contains instructions to remove Cerber ransomware, viruses, malware, and other threats from your computer.

Cerber Ransomware Removal & Help Guide

Cerber ransomware is a computer infection that encrypts the files on your computer, changes file extensions to .cerber, leaves multiple files named # DECRYPT MY FILES # file in every folder, changes your desktop to a ransom note that says “your documents, photos, databases and other important files have been encrypted,” and demands an excessive ransom to decrypt your files.

cerber ransomware

Once Cerber ransomware has been installed it will leave multiple files named # DECRYPT MY FILES # (including a .html file and .txt file) in every folder it encrypts files in. It will change the filename of files it encrypts to something ransom and will amend a .cerber extension to each file. An example of a changed filename is 2Dr02sMu83.cerber.

This is an example of the # DECRYPT MY FILES #.txt file:

 
 
 C E R B E R R A N S O M W A R E
 
 
 #########################################################################
 
 
 Cannot you find the files you need?
 Is the content of the files that you looked for not readable?
 
 It is normal because the files' names, as well as the data in your files
 have been encrypted.
 
 Great!!!
 You have turned to be a part of a big community #Cerber_Ransomware.
 
 
 #########################################################################
 
 
 !!! If you are reading this message it means the software
 !!! "Cerber Ransomware" has been removed from your computer.
 
 
 #########################################################################
 
 
 
 
 
 For your information the software to decrypt your files (as well as the
 private key provided together) are paid products.
 
 After purchase of the software package you will be able to:
 
 1. decrypt all your files;
 
 2. work with your documents;
 
 3. view your photos and other media;
 
 4. continue your usual and comfortable work at the computer.
 
 If you understand all importance of the situation then we propose to you
 to go directly to your personal page where you will receive the complete
 instructions and guarantees to restore your files.
 
 
 Additional information:
 
 You will find the instructions for restoring your files in those folders
 where you have your encrypted files only.
 
 The instructions are made in two file formats - HTML and TXT for
 your convenience.
 
 Unfortunately antivirus companies cannot protect or restore your files
 but they can make the situation worse removing the instructions how to
 restore your encrypted files.
 
 The instructions are not viruses; they have informative nature only, so
 any claims on the absence of any instruction files you can send to your
 antivirus company.
 
 
 #########################################################################
 
 
 Cerber Ransomware Project is not malicious and is not intended to harm a
 person and his/her information data.
 
 The project is created for the sole purpose of instruction regarding
 information security, as well as certification of antivirus software for
 their suitability for data protection.
 
 Together we make the Internet a better and safer place.
 
 
 #########################################################################
 
 
 If you look through this text in the Internet and realize that something
 is wrong with your files but you do not have any instructions to restore
 your files, please, contact your antivirus support.
 
 
 #########################################################################
 
 
 Remember that the worst situation already happened and now it depends on
 your determination and speed of your actions the further life of
 your files.
 

Cerber ransomware will then change Windows desktop to a temporary image that contains information and instructions about the infection.

Your documents, photos, databases and other important files have been encrypted!

If you understand all importance of the situation then we propose to you to go directly to your personal page where you will receive the complete instructions and guarantees to restore your files.

There is a list of temporary addresses to go on your personal page below:

How to remove Cerber Ransomware

This guide below will help you remove malicious files from your computer. It will not help you recover your files. At this time there is no free decryption method. If you do not wish to complete this guide you can restore or recover your computer to factory settings or a data before your computer was infected.

  1. Scan your computer with Malwarebytes
  2. Scan your computer with HitmanPro
  3. Cleanup and repair settings with CCleaner

1. Scan your computer with Malwarebytes

The first step to remove Cerber ransomware and malicious traces from your computer is to download and install Malwarebytes Anti-Malware software in order to perform a full system scan for malicious files.

1. Download and Install Malwarebytes Anti-Malware software.

2. Open Malwarebytes and click the Scan Now button or go to the Scan tab and click the Start Scan button.

3. When the Malwarebytes scan is complete click the Remove Selected button.

4. To finish the Malwarebytes scan and remove detected threats click the Finish button and restart your computer once promoted to do so in a pop-up message from Malwarebytes.

2. Scan your computer with HitmanPro

The second step to remove Cerber ransomware and malicious traces from your computer is to download and install a second opinion scanner called HitmanPro by Surfright in order to perform a full system scan for malicious files.

1. Download and Install HitmanPro by Surfright.

2. Open HitmanPro and click Next to start scanning your computer. *If you are using the free version you may chose to create a copy or perform a one-time scan.

3. When the HitmanPro scan is complete click the Next button.

4. To activate the free version of HitmanPro: enter your email address twice and click the Activate button.

5. Click the Reboot button.

3. Cleanup and repair settings with CCleaner

The third step to remove .Cerber ransomware and malicious traces from your computer is to download and install CCleaner by Piriform in order to delete leftover junk files, tracking cookies, registry entries, unwanted start-up tasks, and more.

1. Download and Install CCleaner by Piriform.

2. Open CCleaner and go to the main Cleaner screen. Click the Analyze button. When the process is complete, click the Run Cleaner button on the bottom right of the program interface.

3. Go to Tools > Startup and search for suspicious entries in each tab starting from Windows all the way to Content Menu. If you find anything suspicious click it and click the Delete button to remove it.

4. Go to the Registry window and click the Scan for Issues button. When the scan is complete click the Fix selected issues… button and click Fix All Selected Issues.