PDA

View Full Version : cryptolocker - is there a solution now?



Baskorsnism
08-25-2015,
Hi,

In March my laptop was infected with Cryptolocker. Whilst it was easy to get rid of, the damage was immense. I read up about all the ransomware issues, abandoned it and I switched to my other laptop.

Anyway, I found a registry entry that listed all the files it 'locked' - 17240 in total! - at this location.

HKEY_CURRENT_USER\Software\B6DEF8395259905CF62BA61 CD1B60E39
\PROTECTED

I see that crypotolocker was in the news a few weeks ago.I wondered if there had been any definite fix, reversal, or ability to retrieve the files?

At the time, whilst most of my stuff was backed up, I still lost about two weeks work (jpegs, pdfs, pngs, txts, docs) that I'd like to retrieve. If its really not possible, then I'm just going to format the drive, as its running very slow and most of the programs that contain any of those file extentions no longer run properly, as the progams contain some of those file extensions

BbabertFlek
08-25-2015,
If you can get a sample file that was encrypted, upload it to https://www.decryptcryptolocker.com/, some security companies were able to get access to the keys of the encrypted files, and will give them out for free. Good luck

bbtnfjdwrd
08-27-2015,
Reading that Guide will help you understand what CryptoLocker Ransomware does and provide information for how to deal with it...including prevention, and possibly recover your files. Please note that the guide was updated 08/06/14 to include the following information.

bcluxpxal
08-27-2015,
There is also a lengthy ongoing discussion in this topic: Cryptolocker Hijack Program (http://www.bleepingcomputer.com/forums/t/506924/cryptolocker-hijack-program/). Since this infection is so widespread, rather than have everyone start individual topics, it would be best (and more manageable for staff) if you posted any questions, comments or requests for assistance in that topic discussion.

bbifcxflgx
08-27-2015,
I tried uploading a sample cryptolocked file to www.decryptcryptolocker.com (http://www.decryptcryptolocker.com) and the screen hangs, gives me a pop up telling me not to turn off the page, but the file never uploads - i've tried with both a doc and a jpeg, both very small in size.

I've tried the cryptounlocker gui on a folder full of locked files using the key provided in the thread link, but it isn't recognising the files as locked.