Remove Cerber Virus - Here's how

With the Cerber Virus you have caught very persistent malware that you should remove immediately. We'll show you how to do the blackmailing yourself.

Remove Cerber Virus - does it work at all?

• The Cerber Virus should change itself every 15 seconds so that anti-virus programs cannot detect, block and delete it. Manual removal from Cerber Virus is possible, but it does not remove the encryption of your data. Strictly speaking, it is ransomware.
• Cerber is far from being the first extortion virus to work this way. In the past, several such viruses have been decrypted by experts and tools to combat them have been published. This is not yet the case with the Cerber Virus.
• You cannot currently decrypt your data for free. If there are very important files on the computer that you do not want to replace or lose, we recommend that you wait and see. The chance that the virus will still be cracked in the coming weeks is not too small.
• The requested around 500 euros should not be paid. There is no guarantee that the files will be decrypted. Similar viruses decrypted it, but nothing happened to others.
• At best, you have a backup of your documents. If you reinstall Windows, you are rid of the Cerber Virus. Alternatively, you can remove Cerber Virus, but your files will remain encrypted.

Instructions: How to remove the Cerber Virus

The Cerber Virus nests in several areas of the computer. In the following instructions we will show you how to remove the Cerber virus for the most part. However, we advise you to wait for the virus to be decrypted or reinstall Windows.

1. Open the registry and navigate to the following path on the left: HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run
2. Select the value with the cryptic name on the right and remove it.
3. Change from "Run" to "RunOnce" on the left and delete the file here too.
4. Close the registry and open Explorer, for example using the [Windows] and [E] keys.
5. Navigate to the path C: \ Users, select your user and open the "AppData" folder there.
6. If the folder is not visible, you have to display the hidden files under Windows.
7. Again, you can see a file with a cryptic name that you can delete.
8. Now follow the further path "Roaming \ Microsoft \ Windows \ Start menu" and delete the cryptic file again.
9. Finally, remove the Cerber files from your desktop and empty the trash.
10. After a restart, the Cerber virus should have disappeared and no longer start. The encryption is unfortunately retained.