It encrypts users' documents, and then it requests pay for ransom.

[The symptom] 

1. It creates following files. (Based on Windows XP)

2. It encrypts normal documents and changes the files extension to .ctbl.

3. It shows a message about file encryption on users' PC screen.

4. It requests 0.34 BitCoin (approx. USD $173.00) in order to restore the encrypted files.

[How to repair]

Reparable by ViRobot engine ver. 2014-08-22 or above.