cancel
Showing results for 
Search instead for 
Did you mean: 
Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 11 of 22

Re: How can I decrypt files after CryptoLocker virus

I am sure the writers of the malware re-wrote it anyway, as that's what they always do to try and keep ahead of the anti-malware brigade.

When things like that strike you should not click anything, or even move your mouse, power off at the main switch.  Then boot into Safe Mode and see if you can wind back using System Restore.

If not then I suggest posting a Hijackthis log on specialist forums such as BleepingComputer for instance.

See:

Reliable Contributor tao
Reliable Contributor
Report Inappropriate Content
Message 12 of 22

Re: How can I decrypt files after CryptoLocker virus

If not Safe Mode then exit out of the pop-up/ad without clicking on anything inside it by using the Task Manager.  This will terminate the browser at the root level without executing anything within the pop-up/ad.

If this information was helpful or has answered your question, please select Accept as Solution. This will assist other memebers
Highlighted

Re: How can I decrypt files after CryptoLocker virus

I believe the only way you're going to get rid of this is if you had a backup.  You will need to restore from a previous state.

Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 14 of 22

Re: How can I decrypt files after CryptoLocker virus

I moved this out of Breaking Security News to Malware Discussions > Home User Assistance as a better spot for it.

As btstevens says if no back ups then try System Restore and if that fails then format and reinstall the system would probably be the only alternative.

Moderator.

Re: How can I decrypt files after CryptoLocker virus

I am having the same issue. system attacked by cryptolocker and same is the case when i try uploading an infected file to that website. did you find any solution ?

Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 16 of 22

Re: How can I decrypt files after CryptoLocker virus

As posted earlier - see "First Things To Try" here: 

Re: How can I decrypt files after CryptoLocker virus

Thanks for the reply brother. the problem is that the only solution on this web page that may have solved my problem is system restore which i cannot do because being the dumbest person on the planet that i m i formatted and re installed my windows and don't have a restore point. Now probably I m screwed but there must be something that can help ? most of my files are encrypted by cryptolocker and now that it is gone and all the chances of paying ransom and getting a private key to decrypt my files are gone with it, the only option I have is to find a solution to restore them.

Re: How can I decrypt files after CryptoLocker virus

10358877_10203595901238430_4512589802814757060_n.jpg   It looked like this btw... I dont know if this is original cryptolocker or a variant...

Reliable Contributor exbrit
Reliable Contributor
Report Inappropriate Content
Message 19 of 22

Re: How can I decrypt files after CryptoLocker virus

Probably a variant by now as it's been around for a while.   There's no guarantee your files would have been made available to you anyway no matter what ransom you paid, so never, ever pay one unless you like financing crime syndicates.  As per my link, at the first hint of this kind of trouble, do NOT touch any keys or your mouse because that is what activates it....power off immediately, pull the plug at the power switch if necessary.

In this case you are too late so I would do a long format and reinstall your system.  As a precaution remove any attached drives as they may be harboring these things.   Then, for the future, be extra careful what you download, where you surf and look out for hidden extras when installing software.

Re: How can I decrypt files after CryptoLocker virus

I have already formatted the system drive partition and re installed windows but i have important data on other partitions which is infected (encrypted). So does that mean that I can never recover those files that are infected ?

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community