Definition:
CTB Locker (Curve-Tor-Bitcoin Locker), also known as Critroni, is a file encrypting ransomeware which can infect all versions of Windows. When you become infected with CTB Locker, the malware will store itself in the Temp folder as a random named executable. Then it will create a hidden random named job in Task Scheduel that launches the malware executable every time you login. The CTB Locker will scan your computer for important personal files and encrypt them. Besides, the CTB Locker infaction will rename them so that they end with a CTBL extension. Therefore, these CTBL files are simply your normal data files that have been encrypted. There is no way to open a CTBL file unless you first decrypt it by paying the ransom. If you do attempt to open a file with a program, the program may state that it is corrupted or just display garbled text on the screen. The only way to recover these files so that they show the original, and correct, information is to restore them in some manner or pay the ransom.
