Cryptowall 3.0 ransomware switches to anonymous I2P network

Would it be possible to use "system restore/restore previous versions" to get around this problem?

a reply to: PhoenixOD

Nope this maleware/ransomware also deletes your restore points. Tried using Shadowcopy even before i did a clean install, every other hard drive apart from my C: drive showed up nothing.

a reply to: andy06shake

I'm not tech smart.
But perhaps since the ATS owners might deal with this issue... and future tech issues. Could asking Skepticoverlord his advice?
I believe the owners consult with INFRAGARD..
Yes skeptic is a busy man. But .......
No matter how dumb a question I ask of him... he's always made time to answer back either here or twitter...


Or you could cave a little and pay ( not ransom ) and take it to a computer doctor.

a reply to: andy06shake

How about using software that searches for deleted files and try to find the restore points?

originally posted by: andy06shake
a reply to: Maverick7

That's the mystery eh? I suppose if i knew the answer i would not be in said situation.

Only new software i have recently added was a Plex media server so i can play media via my PS4.

Did you remove this software? And if you did.
Did it make a difference?

a reply to: Bigburgh

I have an HND in Information Technology and HNC in Electronic and Electrical Engineering. An I.T specialist will only run the same procedures as myself. Short of taking the drives to a data retrieval agency there's not much point.

Virus/maleware/ransomeware is gone now. SuperAntiSpyware/Malewarebytes and a clean Windows install seem to have done the job. There is however no difference, files are still encrypted via MPATTA.

It not like one of the simple ransomwares where the files and/or folders are simply hidden or renamed, this variation actually deletes and replaces said files with MPATTA versions. And like i said Shadowcopy just dont seem to help.

agreed.

you have two options.

pay the ransom or restore from backup..

you have at least 3 versions of your data right?

Live, backup and offsite backup?

a reply to: grey580

To be honest i only had one back up which was also connected to my system hence suffered the same result. I know silly me, i really should know better. Chances are i will have another drive lying around somewhere with duplicate images and video, but no all of it im afraid. Guess its time to start pulling out old drives from the garage.

I dont imagine paying the ransom would help matters and would most lightly only furnish these cyber twats with more of my details. Tell you this i changed all my passwords, sharpish!

originally posted by: grey580
agreed.

you have two options.

pay the ransom or restore from backup..

you have at least 3 versions of your data right?

Live, backup and offsite backup?

I also throw in there cloud storage.

a reply to: andy06shake


Sheesh! Then if you can't do it....
This mal ware is a b##ch!

I usually don't follow threads like this...
But I find this very concerning..

I try hard to avoid viruses. So I only download stuff that I bought. Is endorsed/licenced.
The other animal is my PS3/4...
I got a Trosan Virus after I watched a YouTube video.
Low and behold... I was told to buy Norton antivirus. I had no idea that a gaming console needed such software.


I wish you luck..
It must be gut wrenching to lose those family photo's/history ..
I will follow this thread to see the answer/outcome..

a reply to: andy06shake

You can pay the ransom with a pre paid credit card.

in fact with crypto locker the crooks were only accepting the green dot pre paid card.

Definitely look into an offsite storage.

a reply to: Bigburgh

Pictures and video of my two kid just after the were born, pictures of my Grandpa who i only just lost before Christmas, all sorts mate, stretching back 15 years or so. Devastated is the word i would use.

Hopefully some kind of workaround will become available considering i surely cannot be the only person affected in such a manner. Then again chance would be a fine thing indeed, considering the encryption employed. My best bet is some form of data recovery software.

a reply to: andy06shake

There is no work around.

The files are encrypted. You can only unencrypt with the key.

This is one piece of software I hope to never come in contact with. They (the creators of Cryptowall) have designed something so heinous that the only way to defend against it is to accept the fact that we'll eventually be infected with it and to prepare beforehand.

Now they're switching over to I2P. Mix that in with cryptocurrency and you've got crooks that won't be caught. The fact that they give you a timer in which to unlock your files is truly nasty, especially when that timer "expires" the ransom increases.

That's what I'm saying... losing the most valuable history

I know you have an external drive. Which was hit.
For future reference..
I have stored everything on SD drives...
I get them printed as soon as possible.
I have books and books of photo's as well as keeping SD drives locked away.

This stinks on ice..
I lost hundreds of photo's on a lap top..
Not by virus.. but the comp simply got out of date. Windows XP lost it's capacity and poof..

I trust your knowledge. You will find a way. And spread the word!

a reply to: ThomasMore

Welcome aboard!
The scary part is he does not know how he got it.
I like to download free wallpapers..
Now I have be suspicious of those sites...
Yikes!

oyster.ignimgs.com...

For you andy06shakes

Love this game!

a reply to: Bigburgh

i used to do that, i started noticing more and more alerts from my antivirus and firewall, so i stopped
now i make my own,here are two that i made pretty much close to the same just changed the size and color a little bit.





and this is my desktop with x widgets that i modified.

a reply to: grey580

I know there is currently no other solution than to actually have the access key. but to be quite frank I'm not willing to shell out £1000 for a key that will probobly never materialise and only enables these fools to keep doing what they do.

a reply to: Bigburgh

I'm just reinstalling that title. Weird eh? Great game all the same, ending could have been better.