Cryptolocker Virus

[Exo]

Hey guys. I have a good friend that just called me and said he was hit with the cryptolocker virus. For the ones who may not know, its a pretty nasty ransom style virus that hijacks the computer unless you pay the ransom it is requesting to get a key. I have done a small amount of research on the virus in the past few mins and it looks like there is not a fix yet. Does anyone know a way around it? It sounds like he either has to pay the ransom or lose his data. Any suggestions?

Thanks

EXO

 

[johnb35]

Malwarebytes should have no problems getting rid of it providing you can boot to safe mode without the ransomware loading.

 

[OvenMaster]

On another forum where I'm a member, as well as a number of others, research found that Malwarebytes will remove the offending Cryptolocker software but Malwarebytes will NOT decrypt the data.

When the ransom server was up and running, paying the ransom actually did work for many victims. But since around late September, the server has been down. The encrypted data cannot be decrypted without paying for the proper key. That means that if the server is down or gone, your data is gone. The only option that works is to retrieve your data from your backups.

 

[johnb35]

I highly recommend for any member that is on Facebook to like the BleepingComputer page. They will keep you updated on all new malware released and how to get rid of it. Of course the latest is the Cryptolocker ransomware.

https://www.facebook.com/BleepingComputer?hc_location=stream

 

[T9RKELL]

You still need something like malwarebytes to remove the infection first: http://privacy-pc.com/how-to/remove-cryptolocker-virus.html

As to paying, I heard bad guys keep unlocking 90% of the time. If they stop decrypting - news spread quickly - people will stop paying.

meanwhile Bleeping Computer's facebook page now posts about new malware - Browlock browser Hijacker.