Danger level:  
  (99/100)

Maktub virus. How to delete? (Removal tutorial)

removal by Olivia Morelli - - | Type: Ransomware
12

Maktub virus – another threat that targets your personal files

Maktub virus is one of many ransomware viruses that might be delivered to your email inbox. Victims of the ransomware open an infected email attachment and let the virus in. Once it infiltrates the computer, it starts scanning the system and encrypting files. Unfortunately, malware is dangerous, powerful and capable of corrupting hundreds of different file types. For data encryption, Maktub ransomware uses unique and individually generated key. For data decryption, victims need a private key which is hidden in a ‘secret’ hackers’ server. According to the crooks, without this key, you can forget about the possibility to get back the access to your files. Cyber criminals provide this information and give victims instructions in the ransom note called DECRYPT_INFO_[random].html which is opened after successful data encoding. Victims can purchase a private key for 0.5-1.5 Bitcoins (about 300-800 GBP) within 12 hours. Indeed, they do not give much time and briefly explain that payment has to be made using Tor browser only. Why do they ask using this strange tool? It allows criminals to stay anonymous and avoid legal punishment for blackmailing people. Even though they give an opportunity to decrypt one corrupted file for free, we do not recommend doing it or making the payment. With decoded files, you might get additional malware. However, the biggest chance is that crooks will disappear after receiving several hundreds of pounds and you will be left with an even bigger loss. For this reason, we recommend Maktub removal. Once you encounter it, install Reimage or Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus and wipe out this unpleasant computer infection. Virus removal will not recover your files, but it’s a necessary step to protect your PC in the future.

Maktub virus has its followers. Soon after malware has been spotted, virus researchers discovered another version of the ransomware. The latter virus also targets and encrypts personal files and demands paying the ransom. To all corrupted files, it appends .maktub file extension and then drops a ransom note. Cyber criminals inform about data encryption and ask victims to email them via contatomaktub@email.tg. What is interesting that ransom message is written in Portuguese, so ransomware mainly targets Portuguese-speaking countries. However, it doesn’t matter which version of Maktub has hacked your computer, paying the ransom should not be considered. It is not only a risky activity, but also it’s motivation for cyber criminals to continue their job and develop more projects. The aim of ransomware viruses is to swindle the money from naïve and terrified computer users. Therefore, instead of making the payment, remove Maktub from the computer and retrieve files from data backups. If you don’t have them, at the end of the article, you will find additional methods that might be helpful for data recovery.

The example of Maktub virus attack

Malware transmission tendencies

The developers of ransomware often use the same popular and effective malware distribution strategy. For a while, malicious email campaigns have been the No.1 distribution technique. Maktub ransomware uses this method as well. Crooks pretend to be representatives of the particular company and ask victims to pay the debt. There’s no surprise that they provide a malicious link to a ‘printable’ version of the document, but it’s not all. They also inform that original document will be sent to their homes and they do not bluff – in the message victims see their real home address. It’s still unknown how criminals get access to peoples’ personal addresses. However, it’s a clear sign that they take their job seriously and you should not underestimate them.

Besides, ransomware viruses might be spread using other distribution techniques, such as malware-laden ads that are placed on both high-risk and legal websites, via file-sharing services or updating/downloading fake software.

Elimination guide for Maktub ransomware virus

To remove Maktub from the computer, you will need a strong and reputable anti-malware program. Ransomware might block access to these kinds of programs and prevent from installing or updating them. If it happens to you, follow out instructions below. We will help you to wipe this computer infection from the system. If you do not use any security software, we recommend installing Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware. After Maktub elimination, you can retrieve files from backups or use additional methods provided below.

We might promote some affiliate products. An entire disclosure is provided in our Terms and Conditions. By Downloading any recommended Anti-spyware software to uninstall Maktub virus you accept our privacy policy and terms and conditions.
try it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Computer security experts recommend using Reimage to uninstall Maktub virus. Reimage scans the entire computer system and checks whether it is infected with spyware/malware or not. If you want to remove computer threats and secure your computer system, you should consider buying the licensed version of Reimage.

You can find more details about this program in Reimage review.

You can find more details about this program in Reimage review.
Press mentions on Reimage
Press mentions on Reimage

Manual Maktub Virus Removal Instructions:

Eliminate Maktub using Safe Mode with Networking

You can detect malware using Reimage.
You need to purchase a licensed version of it to remove threats.
More details about Reimage.

  • Step 1: Restart your computer in Safe Mode with Networking

    Windows 7 / Vista / XP
    1. Go to Start Shutdown Restart OK.
    2. As soon as your computer starts, start pressing F8 key repeatedly before the Windows logo shows up.
    3. Choose Safe Mode with Networking from the list Choose 'Safe Mode with Networking' option

    Windows 10 / Windows 8
    1. Click on the Power button at the Windows login screen, and then press and hold Shift key on your keyboard. Then click Restart.
    2. Then select Troubleshoot Advanced options Startup Settings and click Restart.
    3. Once your computer starts, select Enable Safe Mode with Networking from the list of options in Startup Settings. Choose 'Enable Safe Mode with Networking' option
  • Step 2: Remove Maktub

    Sign in to your account and launch any Internet browser. Download a legitimate anti-malware software, for instance, Reimage. Make sure you update it to the latest version and then run a full system scan with it to detect and eliminate all malicious components of the ransomware to remove Maktub completely.

If your ransomware does not allow you to access Safe Mode with Networking, please follow the instructions provided below.

Eliminate Maktub using System Restore

You can detect malware using Reimage.
You need to purchase a licensed version of it to remove threats.
More details about Reimage.

  • Step 1: Restart your computer in Safe Mode with Command Prompt

    Windows 7 / Vista / XP
    1. Go to Start Shutdown Restart OK.
    2. As soon as your computer starts, start pressing F8 key repeatedly before the Windows logo shows up.
    3. Choose Command Prompt from the list Choose 'Safe Mode with Command Prompt' option

    Windows 10 / Windows 8
    1. Click on the Power button at the Windows login screen, and then press and hold Shift key on your keyboard. Then click Restart.
    2. Then select Troubleshoot Advanced options Startup Settings and click Restart.
    3. Once your computer starts, select Enable Safe Mode with Command Prompt from the list of options in Startup Settings. Choose 'Enable Safe Mode with Command Prompt' option
  • Step 2: Perform a system restore to recover files and settings
    1. When the Command Prompt window appears, type in cd restore and press Enter. Type 'cd restore' without quotes and hit 'Enter'
    2. Then type rstrui.exe and hit Enter.. Type 'rstrui.exe' without quotes and hit 'Enter'
    3. In a new window that shows up, click the Next button and choose a restore point that was created before the infiltration of Maktub and then click on the Next button again. When 'System Restore' wizard comes up, click 'Next'. Choose a preferable restore point and click 'Next'
    4. To start system restore, click Yes. Hit 'Yes' and start system restore
    After restoring the computer system to an antecedent date, install and check your computer with Reimage to uncover any remains of Maktub.

Bonus: Restore your files

Using the tutorial provided above you should be able to eliminate Maktub from the infected device. novirus.uk team has also prepared an in-depth data recovery guide which you will also find above.

The aim of the ransomware viruses is to swindle the money from the victims. However, you should not let crooks benefit from your loss. Keep in mind that paying the ransom is a risky activity, because hackers might not provide a necessary decryption key. Instead of paying the money, remove the virus and then restore files from backups. If you do not have data backups, try to retrieve at least some of your files using alternative methods.

There are a couple of methods you can apply to recover data encrypted by Maktub:

Give Data Recovery Pro a try!

This tool might be useful in recovering encrypted files. We cannot assure that Data Recovery Pro will definitely restore all your lost files; however, you may be able to decrypt at least some of your files for sure.

  • Download Data Recovery Pro (https://novirus.uk/download/data-recovery-pro-setup.exe);
  • Install Data Recovery on your computer following the steps indicated in the software’s Setup;
  • Run the program to scan your device for the data encrypted by Maktub ransomware;
  • Recover the data.

Take advantage of Windows Previous Versions feature

You can try to restore some of your files using this method only if you have enabled System Restore function before ransomware attack. If you haven’t did it before, this method won’t work for you.

  • Right-click on the encrypted document you want to recover;
  • Click “Properties” and navigate to “Previous versions” tab;
  • In the “Folder versions” section look for the available file copies. Choose the desired version and press “Restore”.

It is strongly recommended to take precautions and secure your computer from malware attacks. To protect your PC from Maktub and other dangerous viruses, you should install and keep a powerful malware removal tool, for instance, Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware.

About the author

Olivia Morelli
Olivia Morelli

If you found this free removal tutorial helpful, please consider making a donation to support us. Even the smallest amount will be appreciated and will help to keep this service alive.

Contact Olivia Morelli
About the company Esolutions

Source: https://www.2-spyware.com/remove-maktub-virus.html

Uninstall guides in different languages