Cryptolocker malware infection (need help getting data)

dannymyung
dannymyung used Ask the Experts™
on
Hello,

I have a laptop that was infected with the Cryptoware Virus/Ransomware. The infection was removed and now the personal data that is currently on the Hard drive is encrypted. I have tried a system restore to see if i can get it to show back up and maybe pay the $300 is was requesting and get the Private RSA 2048 key to unlock the personal files but I have had no success with that. Is there a utility or a way to decrypt or fix the issue so that I can view and open my data like normal. Apparently this Virus is very new and I need any insight or thoughts as to how I can recover the data that was locked by this scary piece of malware. Any suggestions would greatly be appreciated.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Commented:
You should never pay ransom, probably will not help anyway.
Do you have windows 7?  If so try the previous version option in Windows Explorer.  Chose a date prior to getting hit.
Go to a file or folder, right mouse and select properties and then "Previous Versions".  If you see one prior to infection click on restore button at the bottom.

Author

Commented:
This computer is running on Windows 7. What you are saying is to rollback the time clock to a date prior to getting infected and then what?

Author

Commented:
I will give that a try and respond after that.
Exploring SharePoint 2016

Explore SharePoint 2016, the web-based, collaborative platform that integrates with Microsoft Office to provide intranets, secure document management, and collaboration so you can develop your online and offline capabilities.

Commented:
Look for files and folders prior to the hit.
for example:
 
If I knew I was infected on September 1st, then I could restore any of these:
Word doc Previous versions

Author

Commented:
I've requested that this question be deleted for the following reason:

Closing the question because Crytolocker has already done the damage.
Commented:
What is the extension of the encrypted files?
Is it .locked or .kracken?
If so try Kapersky's special utility RakhniDecryptor.  You can find it at majorgeeks.com

Commented:
Did that work?
How about an update please.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial