I work at a computer shop. A customer got their business computer infected with Cryptowall 3. He paid to get the decryption key.
I downloaded the cryptowall 3 decrypter from the website. It can see the computer is infected. It scans, find files and says it decrypts them. But not all of them.
Im starting to think there are two different versions of the virus. if you look at this first example, it finds a file and says it has decrypted it
But then there are all these other files with a .jpwkczk extension that it doesnt even attempt to decrypt.
I had one idea that maybe it needs those four Help_Decrypt files in the folder to trigger the program, but that doesnt work either.
Im pretty sure the program is telling the truth when it says it has decrypted a file. Almost all of the files without that weird extension seem to work now. Some others dont because it cant decrypt them for some reason
Its really weird, Im not sure what to do now. The customer has basically wasted $500.