Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

I got cryytowall virus,,,,how i uncrypto my files

Posted on 2015-02-06
4
Medium Priority
?
105 Views
Last Modified: 2015-02-17
i got a crypto virus,,,,,, and lost my files
0
Comment
Question by:Danny Paulino
  • 2
4 Comments
 
LVL 99

Accepted Solution

by:
John Hurst earned 2000 total points
ID: 40594760
There is no practical way to remove the encryption and it is a bad idea to pay. You need to clean up the machine (or reinstall Windows) and restore the files from backup.
0
 
LVL 65

Expert Comment

by:btan
ID: 40595079
agree with John. Couple of task now
- Isolate your machine, network shared drive, external media used in affected machine,
- Change your online password and other associated network login
- Identify all files encrypted for recovery to backup.

Most of the time, those cryptolocker and variant family will disable and removed the shadow copies and backup too. You can try to recover but do be caution not to have those external media used without scanning and plugging into other machine.

BleedingComputer has pretty good steps to recover as well identification. For safeguarding machine once clean up, check out Cryptoprevent for application whitelisting or Windows Applocker or Software Restriction Policy.

Below are the common one that I see most are affected with (catch the screen to see if it match what you see too)
:Cryptolocker - http://www.bleepingcomputer.com/virus-removal/cryptolocker-ransomware-information
:CryptoWall - http://www.bleepingcomputer.com/virus-removal/cryptowall-ransomware-information

Much less affected but of same variant and very recent too
:CTB Locker - http://www.bleepingcomputer.com/virus-removal/ctb-locker-ransomware-information
:Torrent Locker - http://www.bleepingcomputer.com/virus-removal/torrentlocker-cryptolocker-ransomware-information
:Coinvault - http://www.bleepingcomputer.com/virus-removal/coinvault-ransomware-information
0
 
LVL 99

Expert Comment

by:John Hurst
ID: 40614673
@Danny Paulino  - Thanks. That is a nasty virus and I hope you were able to restore your files.
0
 

Author Comment

by:Danny Paulino
ID: 40614716
I used Ubuntu and open offices and recovery some files,,,,,,,,,,,,,thanks
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Worried about if Apple can protect your documents, photos, and everything else that gets stored in iCloud? Read on to find out what Apple really uses to make things secure.
Ransomware - Defeated! Client opened the wrong email and was attacked by Ransomware. I was able to use file recovery utilities to find shadow copies of the encrypted files and make a complete recovery.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
Suggested Courses

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question