[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2833
  • Last Modified:

DECRYPT Instruction Virus

I have got the DECRYPT Instruction Virus on my network last week. I have removed the virus but all my files are now encrypted and I can not get to them. Has anyone and process as to how to decrypt these files. Any help would be great. The backups also get infected. They are looking for us to pay $500 to decrypt these files
Thank you
0
jodyreid
Asked:
jodyreid
  • 2
  • 2
3 Solutions
 
KimputerCommented:
Cryptolocker "users" might be in luck, as two firms accidentally came upon a database where they could extract some keys. I just hope yours is there too. Otherwise, you're out of luck, as these are nasty little buggers.

https://www.decryptcryptolocker.com/
0
 
jodyreidAuthor Commented:
It is Cryptowall virus so I don't think this will work as it is not a Cryptolocker
Thank you
0
 
GiladnCommented:
sorry mate, this is a malware not a virus.
how much time has passed since the infection?
do you have  Shadow Copies  ON? try recovering from shadow copies..
also see here:
http://www.wintips.org/remove-cryptowall-virus-and-restore-cryptowall-files/
no guarantee it works..
0
 
GiladnCommented:
p.s

Paying most likely will not get you the files back - I tried with a client they took the money and gone!
0
 
jodyreidAuthor Commented:
Thank you for your help.
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now