I would like to share as what I have discovered and hopefully found a cure to decrypt all my encrypted files.
All my files was infected by this ransom or cryptowall virus. There's was a note and every folder infected. Please see below message of the noted in text file.
All your important files were crypted with two strong algoritms - RSA and AES
All files that have been cryped have name, starting with error_
We can sell you the program that will restore all your files.
If you want buy this program, you need send us your Unique Identificator on [email protected]
After that we will send you instructions of payment
Also you can attach one small file (less than 300 Kilobytes) and we will restore it.
If we didnt answer you during 1-2 days, it means that we didnt get your letter. So,
make your own e-mail account on www.ruggedinbox.com and send your letter again.
I just wrote an email and attached the encypted files to [email protected] and received the response this morning together with the decrypted files which i sent. (.xls file)
Sent: Wednesday, 21 January 2015 9:07 AM
Subject: Re: 19683
Hello. Program costs 2 bitcoins (now 2 bitcoins = 400 usd)
You need send 2 bitcoins to address 1Jvv62ChWGj2DwLcGtCJtNtrfpCkfLrvEJ
You can use one of those sites to change your money to bitcoins:
You dont need install any bitcoin software. You need only use one one those bitcoin services or others (also you can look here other bitcoin services for your country - www.howtobuybitcoins.info) to send us bitcoins.
And we dont need your files. We only need some money.
I attached your decrypted file.
I manage to scan my computer and shadow copies is not present.
Please help if anybody out there have the solution to decrypt the files.
I have tried all the possible ways to decrypt but still no luck.
- kaspersky RannohDecryptor