May. 30th, 2014 11:46 pm
smrgol: (SL Kirin Front 2)
[personal profile] smrgol
This is absolutely insane. Mom's Windows XP computer has been infected by this thing and every document, pdf, picture file and email has been encrypted.
They want $500 in BitCoins to decrypt them. AND the price goes up to $1000 if you wait.

Wonderful. We don't have the money. So far no one has found a way to decrypt the files either. The program can be removed, but even a System Restore will not bring back files.

We don't have backups either, although some of the files are available elsewhere, from friends or my brother.


Date: 2014-05-31 05:59 am (UTC)
From: [identity profile]
Damn, that's some nasty malware. I wouldn't pay them anyway on principle, but I hope someone more savvy can find/bust them and get people their files back. Good luck finding what you can elsewhere D:.

Date: 2014-05-31 10:10 am (UTC)
From: [identity profile]
Well, fuck...

Yeah, I don't think you can get those back at all, it is fraud and should be reported to the online fraud via local or federal enforcement.

Did look but no way to decrypt those files. (Not without ramming them with brute force but it depends on the keys and encryption used.

Think a clean wipe of the computer is all you can do right about now.

Have a set up for scheduled backups made even if its on the network to another drive, change the firewall/virus program as it clearly failed to stop this thing coming in.

Really sorry though that's happened.

Date: 2014-05-31 10:11 am (UTC)
From: [identity profile]
I hope you find a way to fix it without losing your data

Date: 2014-05-31 01:35 pm (UTC)
From: [identity profile]

Go here: and scroll dow the page. There is a post from "Blackkbox" that includes a link to some decryption software. He says it works, and you have nothing to lose.
Edited Date: 2014-05-31 05:06 pm (UTC)

Date: 2014-08-06 12:25 pm (UTC)
From: [identity profile]
Have you seen this:

Free keys to cryptowall.

Date: 2014-08-08 12:50 pm (UTC)
From: [identity profile]
Thanks for the link. Unfortunately right now it only works on CryptoLOCKER but not CryptoWALL.

It was worth the try though, Thanks!

Date: 2014-08-08 02:14 pm (UTC)
From: [identity profile]

Keep an eye out - it looks like security companies are working on this and are trying to bugger up the ransomeware business model. CryptoWall may be next.


smrgol: (Default)

January 2017

1516171819 2021

Most Popular Tags

Style Credit

Expand Cut Tags

No cut tags
Page generated Sep. 25th, 2017 03:02 pm
Powered by Dreamwidth Studios