CryptoWall and DECRYPT_INSTRUCTION Ransomware Information Guide and FAQ

[PorkChopSandwiches]

http://www.bleepingcomputer.com/viru...re-information

We got hit with this last night. One user infected, then it went through every drive mapping he had and encrypted all of our files.

We were lucky to get an older variant that didnt have this "feature"

Note: Newer variants of CryptoWall will attempt to delete all shadow copies when you first start any executable on your computer after becoming infected. Thankfully, the infection is not always able to remove the shadow copies, so you should continue to try restoring your files using this method

So I was able to restore from a shadow.


http://www.pcworld.com/article/26889...ansomware.html

The new CryptoWall samples were not detected by any of the 55 antivirus products used on the VirusTotal website when they were discovered Sunday, the Barracuda researchers said. The detection rate has slightly increased since then, they said.

Its nasty, make sure your backups are in order