Infected by Cryptowall 3.0, help me recover my files

[preventcrypto]

It seems like I got infected by cryptowall, all my files are encrypted and it asks me for 1000$ to decrypt my files, I searched almost everything and couldn't find a solution

 

I already installed and cleaned my system with a few programs like anti-malware, spyhunter, symantec online etc and seems like it limited the virus.. but i still cant access my files and windows

 

"System restore" is also disappeared from my system, and it won't load in normal mode anymore. i'm now running in safe mode with networking.. 

 

Shadow Explore won't show anything either. no drives or anything. same with Rollback RX.. so i guess cryptowall somehow locked these features.. 

 

lets hope to find a solution to at least get my files back.. 

[TwinHeadedEagle]

Hello,

 

Please familiarize yourself with this infection. It encrypts your files and currently there is no way to crack it, you just cannot save your files. What we can do is only to remove infection.

 

 

http://www.bleepingcomputer.com/virus-removal/cryptowall-ransomware-information

[preventcrypto]

Thanks for the fast reply!

 

If I could somehow access system restore, maybe I'm lucky enough to restore it before the infection so I can recover my files.. how is it possible to access??

[TwinHeadedEagle]

If System Restore is turned off, there is not way to restore your PC to the time before infections. All restore points are deleted.

[David H. Lipman]

The OS System Restore functionality works only on EXE and DLL files, the Registry and other OS constructs and does not operate on data files.

 

The ONLY course of action is to clean the PC of malware and mitigate any/all vulnerabilities and then delete all encrypted data files.

Once the PC is in a non-vulnerable and "clean of malware" state, restore your data from backup.

 

If you do not have a backup of your data then your data is lost.

 

Today's ransomware is using the Microsoft Crypto API with high-bit encryption.  Without a Key, one is out of luck and one should consider the data lost.

[David H. Lipman]

Can we consider this complete and and can we close this topic ?

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!