urgent help cryptolock 3.0 infection

[illegalwayz]

hi there got home tonight to find i have been infected with the new cryptolock 3.0 is there any current help out there to remove this and gain access to my files again?

[illegalwayz]

aka crytpowall 3.0 http://www.bleepingcomputer.com/forums/t/563169/after-a-brief-hiatus-malware-developers-release-cryptowall-3/this is the exact problem i have?

[_argus]

Try System Restore.

[illegalwayz]

restore points have been removed by cryptowall 3.0 virus

[_argus]

How are files?

[David H. Lipman]

This is a case of what is called cryptovirolgy and of the worst kind.  Actual personal data files being encrypted and then held for ransom by a malicious actor.

While a "virus" is possible with cryptovirolgy, more often than not the payload is that of a trojan and not a virus.

With the release of the Microsoft Crypto Application Programming Interface (aka; Crypto API) this concept was made much easier.

Decryption of data files is not an easy task.  Often a malware crypto analyst may work on a given problem for very long periods and not come up with a key for decryption.  Sometimes it is possible for a limited family of trojans but is short lived.  Often that work requires that particular trojan that was used to encrypt your data.

You need to understand that the expectation for a positive outcome is EXTREMELY low.  Even if you paid a security company it may be costly and still not have a positive outcome.

You should not even consider paying any ransom.  That can actually lead to you being the target of further malicious activity as you will branded a willing "mark".

System Restore only caches Executable files and OS constructs.  It does not work on data files.
 
While you may be able to remove the trojan, chances are extremely low that you can decrypt the data files.  You should consider them lost and restore your data from your last backup.

[AdvancedSetup]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!