how o remove ctb-locker?

Hi dmustang87ncrrcom
 
Welcome to the Community Forums.
 
I am sorry to hear that you have fallen foul of ransomeware.
 
Whilst WSA does protect against ransomware and does have the feature that if the nature of an executing file or app cannot be determined as 'Good' or 'Bad' so that the relevant action can be taken, i.e, files or apps that are of 'undertimed' nature are monitored and their actions journalled, allowing the possibility that any damage done could be 'undone' by using the journal files to power the rollback, no one can ever truthfully say that any AV is 100% proof against threats.
 
The Threat Researchers at Webroot are constantly trying to keep the WSA Client and the Cloud Network updated in relation to new versions and variants but it may be that one of these has managed to slip through.
 
To try to rid yourself of this malware you need professional help therefore, I would recommend that (i) you reboot your system as little as possible for the time being as variants of some ransomware are known to replicate themselves into different areas of the syste on each reboot, so s to make removal more difficult, & (ii) that you Open a Support Ticket ASAP, to let the Support Team know of your issue.  They should then be in a position to investigate the infection and advise as to what if anything they can do to clear it up for you.
 
I should point out that it may not be possible in some circumstances for them to do anything but it is always worth contacting them ASAP in case they can.
 
Please keep us posted as to how you are getting on once you have contact them or if you have any further questions.
 
Regards, Baldrick