Security Stronghold security made easy

How to remove Maktub Ransomware and decrypt files

* What is Maktub Ransomware

* Download Maktub Ransomware Removal Tool

* Decrypt files after Maktub Ransomware infection

* Remove Maktub Ransomware manually

* Get Professional Support

* Read Comments

Threat indicator: HIGH

Threat's profile

Name of the threat:

Command or file name:

Threat type:

Affected OS:

Maktub Ransomware



Win32 (Windows XP, Vista, Seven, 8)

Maktub is ransomware virus distributed in zipped documents attached to spam e-mails. During opening document runs macros that downloads Maktub executable, enters the system and encrypts files stored on the victim's computer. Maktub adds .NORV extension to affected files. Virus allows ransom ($200 - $600) to be paid during 12 hours frame or decryption would be impossible. As Maktub may encrypt important documents and images, this is very dangerous virus. There is currently no decryption tool for .NORD files.

Maktub Ransomware

Maktub Ransomware intrusion method

Maktub Ransomware copies its file(s) to your hard disk. Its typical file name is (randomname).dll. Then it creates new startup key with name Maktub Ransomware and value (randomname).dll. You can also find it in your processes list with name (randomname).dll or Maktub Ransomware. Also, it can create folder with name Maktub Ransomware under C:\Program Files\ or C:\ProgramData.

If you have further questions about Maktub Ransomware, please call us on the phone below. It is toll free. Or you can use programs to remove Maktub Ransomware automatically below.

Download SpyHunter by Enigma Software Group LLC

Download this advanced removal tool and solve problems with Maktub Ransomware and (randomname).dll (download of fix will start immediately):

Download Removal Tool to remove Maktub Ransomware

* SpyHunter was developed by US-based company EnigmaSoftware and is able to remove Maktub Ransomware-related issues in automatic mode. Program was tested on Windows XP, Windows Vista, Windows 7, Windows 8 and Windows 10. Trial version of SpyHunter provides detection of computer threats like Maktub Ransomware for FREE.

Features of SpyHunter 4

* Removes all files created by Maktub Ransomware.

* Removes all registry entries created by Maktub Ransomware.

* You can activate System and Network Guards and forget about malware.

* Can fix browser problems and protect browser settings.

* Removal is guaranteed - if SpyHunter fails ask for FREE support.

* 24/7 Spyware Helpdesk Support included into the package.

Download Stronghold AntiMalware by Security Stronghold LLC

Download antimalware designed specifically to remove threats like Maktub Ransomware and (randomname).dll (download of fix will start immediately):

Download AntiMalware to remove Maktub Ransomware

Features of Stronghold Antimalware

* Removes all files created by Maktub Ransomware.

* Removes all registry entries created by Maktub Ransomware.

* Fixes browser redirection and hijack if needed.

* "Toolbar Remover" tool will help you get rid of unwanted browser extensions.

* Removal is guaranteed - if Stronghold AntiMalware fails ask for FREE support.

* 24/7 Helpdesk Support and 5 hours of Remote Support via GoToAssist included into the package.

Alternative Solution - Download Kaspersky Rescue Disk

If virus does not allow you to boot in Safe Mode download Kaspersky Rescue Disk remove Maktub Ransomware:

Download Kaspersky Rescue DiskDownload Kaspersky Rescue Disk

How to use Kaspersky Rescue Disk

Make bootable Kaspersky Rescue Disk from CD or USB.

  1. After you downloaded ISO image above - Record the Kaspersky Rescue Disk image to a CD/DVD
  2. To burn it to CD use one of the programs: Free ISO Burner, ISO Recorder, Nero Burning ROM

    To burn it to USB use one of the programs: ISO to USB, Rufus

  3. Set your system to boot from CD or USB (not from hard drive)
  4. Use the Delete or F2 keys, to load the BIOS menu on the start of PC boot. In the BIOS menu choose loading from Removable drive.

kaspersky rescue disk update

Use Kaspersky Rescue Disk to remove Maktub Ransomware.

  1. Boot your computer from Kaspersky Rescue Disk in graphic mode.
  2. Click the button in the bottom left hand corner of the screen.
  3. Update databases of Kaspersky Rescue Disk. Go to the My Update Center tab and click on the Start update button.
  4. Go to the Objects Scan tab.
  5. Put a tick near all checkboxes and click on the Start Objects Scan button.
  6. Remove all found threats.
remove Maktub Ransomware with kaspersky rescue disk

Let our support team solve your problem with Maktub Ransomware and remove Maktub Ransomware right now!

support person

Submit support ticket below and describe your problem with Maktub Ransomware. Support team will offer you solution in several minutes and give a step-by-step instruction on how to remove Maktub Ransomware. Trouble-free tech support with over 10 years experience removing malware.

Submit support ticket

Software Industry Professionals Member
Threat's description and solution are developed by Security Stronghold security team.

Here you can also learn:

* Technical details of Maktub Ransomware threat.

* Manual Maktub Ransomware removal.

* Download Maktub Ransomware Removal Tool.

How to remove Maktub Ransomware manually?

This problem can be solved manually by deleting all registry keys and files connected with Maktub Ransomware, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by Maktub Ransomware. However, this threat may not allow you to do htis in some cases, thats why, we recommednd you to use one of the above options.

To get rid of Maktub Ransomware, you should:

file logo

1. Kill the following processes and delete the appropriate files:

• (randomname).dll

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use Maktub Ransomware Removal Tool for safe problem solution.

windows folder logo

2. Delete the following malicious folders:

• (randomname)

windows registry logo

3. Delete the following malicious registry entries and\or values:

no information

Warning: if value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use Maktub Ransomware Removal Tool for safe problem solution.

How to decrypt files after Maktub Ransomware infection?

You may attempt to decrypt files infected by different versions of CryproLocker. Please, visit following site to decrypt your files:

You will need to upload certain files and wait for the service to decrypt it.

Information provided by: Aleksei Abalmasov

Next threat: »

« Back to catalog

Home | Partners | Shop | Support | Terms of use | Contact Us | Privacy Policy | Sitemap

Copyright © 2017 Security Stronghold. All Rights Reserved. All content on this website is protected and belongs to Security Stronghold LLC.