[Irwwwine]

I worked on my computer last night, and morning when I tryed to turn on it, It became very- very slow. Then when I started it in safe mode I saw every file (doc, jpg,etc) got a new extension: ".cypwdwe" 

And I saw a warning file wrote: I Have to pay 500 USD to decrypt my files. 

I have same very important file this computer, what I haven't a not infected copy.

Please , somebody help me, I never heard this virus before.

A tryed to send files to  www.decryptcryptolocker.com  which told me  file wasn't encrypted by Cryptolocker. Is there any further information about this, can anyone help? Thanks.

Sorry about my bad english I speak just a little.

 

Thank for your help.

 

Irwine

[Advertisements]

Sorry that my response has been so slow. It's been quite busy here. Do you still require help? If so, although I make no promises as this sounds like a very significat infection that has already computed it's nasty work, I will try to help. Can you answer some questions for me?

 

When booting to Safe Mode, are you able to navigate and does the computer work at all?

Are files other than Picture and Docs encrypted? i.e. are System files infected too?

Can you copy the exact Ransom message for me? It will help to isolate the exact infection.

 

Last, can you try and download and run this scan for me in Safe Mode? If it won't download on the infected computer, perhaps you can download it on another computer and transfer it over via a USB drive, transfer it to the infected hard drive and run it then.

 

Scan with Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool x64 and save it to your Desktop.

• Right-click on icon and select Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• When the tool opens click Yes to disclaimer.
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please copy and paste their content into your next reply.

 

 

[Biscuithd]

Sorry that my response has been so slow. It's been quite busy here. Do you still require help? If so, although I make no promises as this sounds like a very significat infection that has already computed it's nasty work, I will try to help. Can you answer some questions for me?

 

When booting to Safe Mode, are you able to navigate and does the computer work at all?

Are files other than Picture and Docs encrypted? i.e. are System files infected too?

Can you copy the exact Ransom message for me? It will help to isolate the exact infection.

 

Last, can you try and download and run this scan for me in Safe Mode? If it won't download on the infected computer, perhaps you can download it on another computer and transfer it over via a USB drive, transfer it to the infected hard drive and run it then.

 

Scan with Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool x64 and save it to your Desktop.

• Right-click on icon and select Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• When the tool opens click Yes to disclaimer.
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please copy and paste their content into your next reply.

 

 

[Biscuithd]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.