Cryptowall

If you have noticed that the majority of your files have been encrypted, it might be very probable that CryptoWall has infected your system. This program will not allow you access your files unless you pay a ransom of 500USD/EUR. Unfortunately, CryptoWall might infect various computers because it is compatible with Windows XP, Windows Vista, Windows 7, and Windows 8. Have you already noticed the presence of this malware? Unfortunately, it is not an easy task to remove CryptoWall.

The main symptom that your system is infected with CryptoWall is the inability to access .docx, .xls, .ppt, .pdf, .jpg, and various other files. In addition, you will notice that such files as DECRYPT_INSTRUCTION.TXT, DECRYPT_INSTRUCTION.HTML, and DECRYPT_INSTRUCTION will be created and if you open the last mentioned file, you will notice URL where you will supposedly find more specific instructions regarding the decryption of files. In addition, you will be asked to download Tor-browser that guarantees anonymity for cyber criminals. If you access the specific website indicated in the instructions, you will notice that you are asked to pay a particular sum of money. Besides, it is stated that the price will double if cyber criminals will not receive money until the mentioned time. If you decide to pay a ransom, you will definitely notice that you have to make a payment in Bitcoins. It means that schemers seek to remain secret at any cost.

It has been found out that CryptoWall acts very similarly as Cryptolocker and CryptoDefence in a sense that they all encrypt files and ask for a ransom. If you want to avoid these undesirable programs, you should better not trust ads claiming that you need to update Adobe Reader, Flash Player or install Java. In addition, you should use P2P carefully and never open spam emails. If you follow our advice, you will definitely reduce the possibility to infect the system with this type of malware.

If you do not want to pay money for the decryption of files, you can restore them from a backup or you can try to find a RSA key, which will help you to decrypt files, on your PC. It is known that this key might be located onto your computer as .cert, .crt or .pfx files; thus, you should try to search for them. In addition, you can use the instructions provided below the article; however, there is no guarantee that they will work in all the cases. It is because clandestine infections keep developing all the time. You should also keep in mind that you should scan your system with a reliable antimalware tool before you use the instructions because CryptoWall might encrypt the files again.

How to decrypt your files

1. Click the Start button to open the menu and then select Control Panel.
2. Locate User Accounts and Family Safety and select it.
3. Move to User Accounts.
4. Locate Manage your file encryption certificates in the menu on the left and click on it.
5. Click the Next button.
6. Tick Use this certificate and then select the certificate.
7. Click Select certificate and then click Next.
8. Click Backup the certificate and key later.
9. Click the Next button.
10. Click All logical drives and then select the Next button.