I noticed I can't access my ms-word files and pdf files including my audio files.A particular file will always appear after booting telling me that I need to go to a particular site if I want to recover my files.I went there but was told except I pay $500 my files would never be decrypted. Please I need the help of experts to get all my over 200 files back.Thanks great Nairaland geniuses.

This is what I see on my windows

What happened to your files ?
All of your files were protected by a strong encryption with RSA-2048 using CryptoWall 2.0.
More information about the encryption keys using RSA-2048 can be found here: http://en.wikipedia.org/wiki/RSA_(cryptosystem)

What does this mean ?
This means that the structure and data within your files have been irrevocably changed, you will not be able to work with them, read them or see them, it is the same thing as losing them forever, but with our help, you can restore them.

How did this happen ?
Especially for you, on our server was generated the secret key pair RSA-2048 - public and private.
All your files were encrypted with the public key, which has been transferred to your computer via the Internet.
Decrypting of your files is only possible with the help of the private key and decrypt program, which is on our secret server.

What do I do ?
Alas, if you do not take the necessary measures for the specified time then the conditions for obtaining the private key will be changed.
If you really value your data, then we suggest you do not waste valuable time searching for other solutions because they do not exist.

Boot up your PC in safe mode. From there, you should be able to fix things.

Visit d nearest shrine

How are we so sure it isn't someone elses files you are trying to decrypt?

Well, you could check your registry to see if there is a new program remotely installed on your PC and take it up fom there.

You get into such mess, especially when you are surfing the internet for free apps, videos, books, downloading everything that has "FREE" as a prefix, that's why it is always good to install firewall and "strong" password your files and PC.

CodeHouse:
How are we so sure it isn't someone elses files you are trying to decrypt?

Well, you could check your registry to see if there is a new program remotely installed on your PC and take it up fom there.

You get into such mess, especially when you are surfing the internet for free apps, videos, books, downloading everything that has "FREE" as a prefix, that's why it is always good to install firewall and "strong" password your files and PC.

I couldn't have said it any better... Including free templates coded with a backdoor...

when did this started?
try to do a window restore point and restore your system to a last know good state.

guru01:
what did this started?
try to do a window restore point and restore your system to a last know good state.

Windows restore will only get him his programs, not files. Or am I missing something bro?

53cur3m0d3:

Windows restore will only get him his programs, not files. Or am I missing something bro?

window restore can restore files and program to a previous state.

guru01:

window restore can restore files and program to a previous state.

windows restore has notin to do wit files.

Thanks for your help but I have finally formatted my hard disk and I lost some files but got most of them back from my emails. Thanks a million. You guys are great.

josieboy55:


windows restore has notin to do wit files.

the particular programme responsible for that is installed on his system meaning that should windows restore work, the programme goes and the files are safe again. But unfortunately windows restore won't work unless he does that from safe mode. Option 2, get an installation CD and re install windows

just been ransomed by this hacker software $500 threatens to delete the passkey after 1 month. thank God for backups

I smell ttrojan horse