Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Cryptowall or a variation of the virus

  • Please log in to reply
No replies to this topic

#1 Maximus45


  • Members
  • 1 posts
  • Local time:09:47 AM

Posted 24 November 2014 - 12:02 PM

I have a computer here that seems to have most, if not all, documents/pictures etc. encrypted.  This is a friends computer and it appears that malwarebytes has removed the virus, but the files are still affected.  Each folder that has encrypted files also contains two documents...DECRYPT_INSTRUCTION(HTML document, but doesnt take you anywhere) and DECRYPT_INSTRUCTION(text document, but access is denied).


I have tried https://www.decryptcryptolocker.com/, but this says that the files are not infected by Cryptolocker.  I have also tried Shadowexplorer, but it doesnt go back far enough.


I am not sure how to proceed at this point.  Some Word documents show the file conversion dialog box hoping that certain encoding will make your document readable (none do) and others just say the file is corrupt and cannot be opened.


I appreciate any help.

BC AdBot (Login to Remove)


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users