?
Solved

HOW_DECRYPT

Posted on 2014-04-01
2
Medium Priority
?
845 Views
Last Modified: 2014-04-01
Hi

A customer recently, a week ago, got infected with the HOWDECRYPT virus on a Windows XP workstation

He ran MalwareBytes and cleaned his files but he was unable to recover his files since XP doesn't provide the file version restore option

Is there any way to recover his encrypted files without actually paying the 'ransom' ?

thanks

yann
0
Comment
Question by:Yann Shukor
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 5

Accepted Solution

by:
Pasha Kravtsov earned 2000 total points
ID: 39970095
As far as I know the malware encrypts all the files and it stores the decryption key not on the local machine but in a remote server so no unless you pay the ransom you can't decrypt the files. This article pretty much sums it up: http://krebsonsecurity.com/2013/11/how-to-avoid-cryptolocker-ransomware/
0
 
LVL 28

Expert Comment

by:Bill Bach
ID: 39970159
Agreed.  I have had several clients get bitten.  All had had to restore from backup.
0

Featured Post

Cyber Threats to Small Businesses (Part 1)

This past May, Webroot surveyed more than 600 IT decision-makers at medium-sized companies to see how these small businesses perceived new threats facing their organizations.  Read what Webroot CISO, Gary Hayslip, has to say about the survey in part 1 of this 2-part blog series.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Worried about if Apple can protect your documents, photos, and everything else that gets stored in iCloud? Read on to find out what Apple really uses to make things secure.
The conference as a whole was very interesting, although if one has to make a choice between this one and some others, you may want to check out the others.  This conference is aimed mainly at government agencies.  So it addresses the various compli…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
Suggested Courses

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question