CryptoWall

[smrgol_t_kirin]

This is absolutely f..ing insane. Mom's Windows XP computer has been infected by this thing and every document, pdf, picture file and email has been encrypted

Comments

[pointytilly]

Damn, that's some nasty malware. I wouldn't pay them anyway on principle, but I hope someone more savvy can find/bust them and get people their files back. Good luck finding what you can elsewhere D:.

[skipai]

Well, fuck...

Yeah, I don't think you can get those back at all, it is fraud and should be reported to the online fraud via local or federal enforcement.

Did look but no way to decrypt those files. (Not without ramming them with brute force but it depends on the keys and encryption used.

Think a clean wipe of the computer is all you can do right about now.

Have a set up for scheduled backups made even if its on the network to another drive, change the firewall/virus program as it clearly failed to stop this thing coming in.

Really sorry though that's happened.

[lowen_kind]

Smrgol,

Go here: http://www.bleepingcomputer.com/forums/t/533715/cryptowall-a-new-ransomware-from-the-creators-of-cryptodefense/ and scroll dow the page. There is a post from "Blackkbox" that includes a link to some decryption software. He says it works, and you have nothing to lose.

[dewhitton]

Have you seen this:

https://www.decryptcryptolocker.com/

Free keys to cryptowall.

[smrgol_t_kirin]

Thanks for the link. Unfortunately right now it only works on CryptoLOCKER but not CryptoWALL.

It was worth the try though, Thanks!

[dewhitton]

Bugger.

Keep an eye out - it looks like security companies are working on this and are trying to bugger up the ransomeware business model. CryptoWall may be next.