How to remove CRBR Encryptor and decrypt .a790 files

Internet is overwhelmed with the unwanted programs, but ransomware is the worst. All common kinds of malware are nothing in compare with any encrypting virus, and the harm that it might inflict. The very dangerous of all is the encrypting ransomware, like CRBR Encryptor, which grants substantial benefit to its makers, and big damage to its victims. Don't fret, we know the answers for all common questions. How to uninstall the virus? How to recover the encrypted files? Simply keep reading, and you'll know the solution!


CRBR Encryptor is a ransomware that infects the computers of users all around the world, and encrypts their files. The developers of CRBR Encryptor performed a very obvious trick, trying to attract everybody’s attention to their product, so its name sounds like the name of one of the most famous ransomware of recent years – CERBER. First of all, it draws an attention of experienced malware fighters. They know that the hackers come back with new versions of their viruses, so CRBR might be the latest CERBER, and it might be a real threat. Fortunately it isn’t. Of course, the victims of CRBR Encryptor won’t say that, because it doesn’t matter for them how complex the virus is since it already encrypted their files. What we know about CRBR Encryptor is that it appends the .a790 extension to the encrypted files, and, most likely, uses RSA and AES encryption algorithms. The amount of ransom is 0,5 BTC and if the payment wasn’t made in five days – the price doubles.

Hackers are trying to scare us, saying different things. They say that they’ll remove the files completely or that they will double the decryption price. They said it at the dawn of ransomware and they will keep saying this but we always knew the answer to these threats: all you need to do is to boot the system in Safe Mode, and do what you want, because virus won’t work in Safe Mode. In the following paragraph you’ll find the detailed instructions and advices on CRBR Encryptor deletion.

How to remove CRBR Encryptor Virus

File restore is the main thing that you worry about, when your laptop is infected by CRBR Encryptor. Deleting the virus doesn't change the state of files, which are already corrupted, but, since the virus lives on your workstation, each downloaded file will be at risk. Ransomware elimination is a required phase of any decryption way. Using the recovery in manual mode or the load of backups, you must uninstall CRBR Encryptor immediately, and if you are going to pay those scammers - the virus must be removed after the full data recovery. The elimination can be made with use of special anti-viral software, or manually. Both manners have their pros and cons, but the major difference among them are the requirements. Hand uninstalling requires some practice of the person that produces it. Skill is required in order to prevent mistakes and to neutralize the consequences of error, if it does occur. Elimination with help of special software does not need any skills of its customer. The only actions that you must do are to buy the program, install it and run the scanning process. Under this part, you will find the full instructions for removing of CRBR Encryptor. Our advices are checked multiple times by hundreds of thousands of users, they are completely reliable and very plain. If you like the prolonged protection and complete system cleaning without user's interference - you can get a reliable anti-viral program right now! Download Spyhunter to remove CRBR Encryptor virus automatically

Step 1. Boot into Safe mode

Safe mode

Start -> Msconfig.exe

Safe mode. Step 1

On the tab Boot select Safe boot

Safe mode. Step 2

Step 2. Check Startup folder

Start -> Msconfig.exe ->Disable unknown programs in the Startup tab


Step 3. Check hosts file

Modify hosts file, that located in C:\Windows\System32\drivers\etc\ .

Hosts file.Step 1

Open the file with Notepad and delete suspicious strings.

Hosts file.Step 2

It has to look like this:

Hosts file.Step 3

Step 4. Scan the system with antiviral scanner


Special Offer

Antivirus scanner

Why we recommend SpyHunter antimalware

Detects most kind of virus: malicious files and even registry keys of malware will be found

Protects your system in the future

24/7 free support team

SpyHunter's scanner is only for malware detection. If program detects virus on the computer, you will need to purchase malware removal tool for $39,99 to delete viruses. SpyHunter has Free Trial for one remediation and removal, subject to a 48-hour waiting period. Uninstall steps and additional information EULA , Privacy Policy and Threat Assessment Criteria.

bwd  Instructions 1/2  fwd

Step 5. Disable Safe mode

Start -> Msconfig.exe ->Disable Safe boot in the Boot tab

Deactivate Safe mode

How to restore files encrypted by CRBR Encryptor

The issue of CRBR Encryptor has only one effective solution, and it is the load of backups. You must use other ways if there's no another choice, but be ready that they might fail. The fact that the backups are kept on external media, makes them absolutely insensitive to CRBR Encryptor's influence. All other techniques depend on the OS functionality, and their effectiveness depends on the complexity of the virus and the absense of skill. We can advise you two extra recovery methods. They are: the restore from shadow copies and the usage of special decryptor. Decryption with use of the special decryptor is pretty effective, but unfortunately, this program isn't created for now. Information on the progress in the creation of the decryptor may be found on Kaspersky lab, MalwareHunterTeam and EmsiSoft official web-sites. By-hand recovery via shadow copies can be done right now. You may use the built-in Windows functionality, but, we suggest you new tools, which will significantly simplify your task. These programs are totally unpaid, and they were made by reputable developers. They are called Recuva and ShadowExplorer, and you may see all info on the official web-sites. If you want more info on this topic - we have an article about file recovery that might interest you.




Add comment

Security code

This website uses cookies to improve your experience. If you continue using the site, we will assume that you accept our cookies policy.