“Your personal files are encrypted by CTB Locker”: decrypt and remove ransomware virus