CryptoWall
May. 30th, 2014 11:46 pm![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png)
This is absolutely f..ing insane. Mom's Windows XP computer has been infected by this thing and every document, pdf, picture file and email has been encrypted.
They want $500 in BitCoins to decrypt them. AND the price goes up to $1000 if you wait.
Wonderful. We don't have the money. So far no one has found a way to decrypt the files either. The program can be removed, but even a System Restore will not bring back files.
We don't have backups either, although some of the files are available elsewhere, from friends or my brother.
*Sigh*
They want $500 in BitCoins to decrypt them. AND the price goes up to $1000 if you wait.
Wonderful. We don't have the money. So far no one has found a way to decrypt the files either. The program can be removed, but even a System Restore will not bring back files.
We don't have backups either, although some of the files are available elsewhere, from friends or my brother.
*Sigh*
no subject
Date: 2014-05-31 05:59 am (UTC)no subject
Date: 2014-05-31 10:10 am (UTC)Yeah, I don't think you can get those back at all, it is fraud and should be reported to the online fraud via local or federal enforcement.
Did look but no way to decrypt those files. (Not without ramming them with brute force but it depends on the keys and encryption used.
Think a clean wipe of the computer is all you can do right about now.
Have a set up for scheduled backups made even if its on the network to another drive, change the firewall/virus program as it clearly failed to stop this thing coming in.
Really sorry though that's happened.
no subject
Date: 2014-05-31 10:11 am (UTC)no subject
Date: 2014-05-31 01:35 pm (UTC)Go here: http://www.bleepingcomputer.com/forums/t/533715/cryptowall-a-new-ransomware-from-the-creators-of-cryptodefense/ and scroll dow the page. There is a post from "Blackkbox" that includes a link to some decryption software. He says it works, and you have nothing to lose.
no subject
Date: 2014-08-06 12:25 pm (UTC)https://www.decryptcryptolocker.com/
Free keys to cryptowall.
no subject
Date: 2014-08-08 12:50 pm (UTC)It was worth the try though, Thanks!
no subject
Date: 2014-08-08 02:14 pm (UTC)Keep an eye out - it looks like security companies are working on this and are trying to bugger up the ransomeware business model. CryptoWall may be next.