Firstly, thank you for taking the time to look at this thread
My father unfortunately got the cryptolocker virus on his laptop while I was away. To add insult to injury he had all family photos mapped to a drive which also got infected (6000+) while i was away I managed to make the bc payment for him and the decryption service (eventually) automatically started.
On my return I checked whether it had successfully decrypted the files: Sods law, it successfully seems to have removed the encryption from all local files but missed many if not all of our family photos - despite still be connected during the decryption process.
The background image with the decryption service url has gone, along with the decryption window. I saved the url and visited it earlier but it states that the payment wasnt made -
"Your files are encrypted.
You did not pay in time for decryption, that's why the decryption price increases 2 times. At the moment, the cost of decrypting your files is 1000 USD/EUR. In case of failure to 27/05/14 - 04:02 your key will be deleted permanently and it will be impossible to decrypt your files."
As evidence to payment, I do have the "Your Private Key.bin" file and was hoping this can be used to decrypt the remaining files? I am really looking for any advice on how I can recover the remaining photos as they mean so much to my family...
I noticed that at the top of the page is called "CryptoWall Decrypter" is this another variant? Can I really of had two version of the ransomware on the machine? Unfortunately, it is difficult to for me to know for sure as I have not been around during the original infection/decryption process...
Thank you very much for any help in advance.
Edited by will1990, 04 May 2014 - 07:41 AM.