Log in

No account? Create an account
Kirin 01 - portrait


This is absolutely f..ing insane. Mom's Windows XP computer has been infected by this thing and every document, pdf, picture file and email has been encrypted.
They want $500 in BitCoins to decrypt them. AND the price goes up to $1000 if you wait.

Wonderful. We don't have the money. So far no one has found a way to decrypt the files either. The program can be removed, but even a System Restore will not bring back files.

We don't have backups either, although some of the files are available elsewhere, from friends or my brother.



Damn, that's some nasty malware. I wouldn't pay them anyway on principle, but I hope someone more savvy can find/bust them and get people their files back. Good luck finding what you can elsewhere D:.
Well, fuck...

Yeah, I don't think you can get those back at all, it is fraud and should be reported to the online fraud via local or federal enforcement.

Did look but no way to decrypt those files. (Not without ramming them with brute force but it depends on the keys and encryption used.

Think a clean wipe of the computer is all you can do right about now.

Have a set up for scheduled backups made even if its on the network to another drive, change the firewall/virus program as it clearly failed to stop this thing coming in.

Really sorry though that's happened.

Go here: http://www.bleepingcomputer.com/forums/t/533715/cryptowall-a-new-ransomware-from-the-creators-of-cryptodefense/ and scroll dow the page. There is a post from "Blackkbox" that includes a link to some decryption software. He says it works, and you have nothing to lose.

Edited at 2014-05-31 05:06 pm (UTC)
Have you seen this:


Free keys to cryptowall.
Thanks for the link. Unfortunately right now it only works on CryptoLOCKER but not CryptoWALL.

It was worth the try though, Thanks!

Keep an eye out - it looks like security companies are working on this and are trying to bugger up the ransomeware business model. CryptoWall may be next.