SONAR.Cryptlck!g109 removal

SONAR.Cryptlck!g109 – Research Report

Creators of Ransom.Cryptolocker have released another variant on October 06 which has been detected as SONAR.Cryptlck!g109, is a Trojan horse that encrypts files on the infected computer and then prompt the victims to buy a super password to decrypt them. Basically, this trojan acts like a ransomware program but PC security experts have been categorized it as a Trojan after its initial analysis. SONAR.Cryptlck!g109 mostly fall on your PC via Spam emails contains RIG exploit kit or other malicious Scripts. Afterwards, when the trojan is executed, it makes {GUID}.EXE in %AppData% folder, locks your PC screen, encrypts saved files and then show a ransom demand. Ransom text shows on your desktop will contain following texts:


“The single copy of the private key, which will allow you to decrypt the files, located on a secret server on the Internet; the server will destroy the key after a time specified in this window. After that, nobody and never will be able to restore files. To obtain the private key for this computer, which will automatically decrypt files, you need to pay.”

This crypto-trojan accept online payments via Bitcoin, cashU, Ukash, Paysafecard, Moneypack in case you got no other option than buying decryption key. Source code analysis of it revealed that it is programmed to lock more than a hundred of type of files. It may include your database files, audio, video and other documents. It has also been confirmed that this trojan horse attempts to contact with more than two hundred questionable websites like,,,,,

Protection tactics against SONAR.Cryptlck!g109 strike

If you want to protect your PC against this trojan, then you have to be extremely curious. You shouldn't open suspicious email attachments in order to clear your suspicion out because that attachment may contain exploit kit which might install SONAR.Cryptlck!g109 trojan onto your system without your knowledge. If you really need to open that Spam email attachment, it better to download and scan that with your Highly efficient Antivirus software. Otherwise, you should delete those Spam emails from your inbox instantly.

However, this trojan pose direct threat to your privacy and cause data loss. Therefore, all victims are being advised to get rid of SONAR.Cryptlck!g109 as soon as possible.


Scan PC to Remove SONAR.Cryptlck!g109

How to Uninstall SONAR.Cryptlck!g109 from Control Panel from Windows 10

  • Click and Open Start Menu option


  • Settings option is to be selected on the menu to show all the contents


  • Click on System option


  • On the system Menu, Click on Apps and features option


  • Now Click on SONAR.Cryptlck!g109 to remove it from PC.

How to Eliminate SONAR.Cryptlck!g109 from Windows 8/8.1

Step 1: Press repeatedly F8 to boot PC in Safe Mode. Restart PC and select “Safe Mode with Networking”.


Step 2: Press ALT+Ctrl+Del to open Windows Task Manager. After that, search all the SONAR.Cryptlck!g109 related processes and then click to “End Task”


Step 3: Type “regedit” in Run dialog box and open Windows Registry Editor. Search and delete all the corrupt registries added by SONAR.Cryptlck!g109 infection.


Step 4: Go to Start and then click to open Control Panel.


After that, click Add/Remove Program


Uninstall SONAR.Cryptlck!g109 associated programs from Windows 8/8.1


Uninstall SONAR.Cryptlck!g109 From Window 7/vista

Tap on F8 Key to Enter Safe Mode


Restart PC and select “Safe Mode with Networking”


First of all close all running programs and open Task manager by pressing ALT + CTRL + DEL keys on your keyboard simultaneously.


Now Click on Processes menu and select all the processes associated with SONAR.Cryptlck!g109 one by one then click on End Task.


Now go to the desktop, click on Start Menu on the left lower corner. Move to Control panel and use left mouse click over it.


The Control panel window will open, if are getting the view by Category find and click “Uninstall a program” below “Programs” group.


Now select SONAR.Cryptlck!g109 within programs list and click on Uninstall.

Steps to Eliminate SONAR.Cryptlck!g109 from Windows XP

Step 1: Restart PC in Safe Mode by continuously pressing F8 button. After that, select “Safe Mode with Networking”.


Step 2: Open Windows Task Manager by pressing Alt+Ctrl+Del together. After that, find and select all the SONAR.Cryptlck!g109 associated processes and then click to “End Task” button.


Step 3: Open Run dialog box and then enter “regedit.exe” to open Windows Registry. Search and then delete all the corrupt and infectious registries added by SONAR.Cryptlck!g109.


Step 4: Click Start button and then go to Control Panel, click to open Windows Add/Remove Program. Search all the SONAR.Cryptlck!g109 related programs and then uninstall it from Windows XP.



How to Uninstall SONAR.Cryptlck!g109 From Your Infected Browser

A. Guidelines to Remove SONAR.Cryptlck!g109 From Microsoft Edge Browser

How to Reset Default Search Engine to Uninstall SONAR.Cryptlck!g109

Select Settings after selecting More (…) on the address bar


Click and select on View advanced settings option

advance settings-edge

In order to input the search engine, Click on <Add new> under option”Search in the address bar with”


Select Search engine and adds as default by clicking on Add as default option.

How to Reset Default Homepage on Microsoft Edge to Uninstall SONAR.Cryptlck!g109

  • Select More (…) option on the address bar followed by settings
  • Select specific page or pages under Open with option
  • After selecting the Custom option, enter the URL of the homepage you wish to set as


B. How to Delete SONAR.Cryptlck!g109 from Google Chrome

Click to Open Google Chrome and then click on menu icon which is on the top right corner and then select Tools → Extensions


Select all the malicious extensions including SONAR.Cryptlck!g109 and then select trash icon


Again click on menu icon and select Settings and then click to Manage Search Engines under the Search section


In Search Engines, remove all the infectious search sites and set Google Chrome as Default Browser


C. How to Uninstall SONAR.Cryptlck!g109 From Mozilla Firefox

Launch Mozilla Firefox and find and click “Firefox” button on the top left corner on the screen.


A drop down box will appear, navigate to Add-ons option and click on it.


In the next window select and click on “Extensions” in left pane.


Find SONAR.Cryptlck!g109 add-on and click on the center area to see the border exactly and click on Disable button.
Wait a moment and let the add-on get disabled.


Now click the “Remove” button, later on uninstall the add-on Mozilla will ask you to restart the browser.


D. How to Remove SONAR.Cryptlck!g109 From Internet Explorer

First of all Launch Internet explorer by clicking the Task-bar Icon on desktop.

Now Click on Tool Menu on web browser interface.


Select and click on Manage add-ons in the drop down box.

A View and manage your Internet Explorer Add-ons window will open, now click on “Toolbar and Extensions” option in left pane.

A list of all installed ad-ons will appear, select SONAR.Cryptlck!g109 and click on “Disable” button and Reset IE


Click to Download SONAR.Cryptlck!g109 Scanner