CryptoLocker Ransomware is HORRIBLE

CryptoLocker is a ransomware program that was released around the beginning of September 2013. This ransomware will encrypt certain files using a mixture of RSA & AES encryption. When it has finished encrypting your files, it will display a CryptoLocker payment program that prompts you to send a ransom of either $100 or $300 in order to decrypt the files. This screen will also display a timer stating that you have 96 hours, or 4 days, to pay the ransom or it will delete your encryption key and you will not have any way to decrypt your files. This ransom must be paid using MoneyPak vouchers or Bitcoins. Once you send the payment and it is verified, the program will decrypt the files that it encrypted.

What has been put together so far.
http://www.bleepingcomputer.com/viru...re-information

@ Shay,

Hell man, you will appreciate that I thought Gen. Curtis LeMay a pacifist when I say this :D

Get these "bitcoin", "moneypak", "paypal", and other such scum under Federal Reserve Bank licencing and control...........hell man! the EU and most of civilisation would back you on that one? OK, it would be Bank of England over here etc.........but they all talk together?

No payments without justification?...............if your government won't allow it there is no point in blackmail?

OH! I noticed that the FBI and DOJ illegally closed Megaupload (not that I approve of the fat German *^^$££%).....why can't the "home of the brave and land of the free" do something about this?................ah! no Hollywood backing?

Yeah, I am cynical..............

We never liked Kim because back in the early 2000s he made a few Ankit Fadia type of claims before being defaced himself.

Hi Aaron, I hope that you and yours are all well,

I was not aware of what you just told us, but I do know that Kim served time for "insider dealing" (stockmarket fraud) over here in Europe. Somehow I doubt if that would surprise you?:D

Recently, I have being dealing with "Delta Searchbar" infestations................ a real pain in the butt:eek:

Best Regards,

Johnno

Quote:

---

Originally Posted by nihil

@ Shay,

Hell man, you will appreciate that I thought Gen. Curtis LeMay a pacifist when I say this :D

Get these "bitcoin", "moneypak", "paypal", and other such scum under Federal Reserve Bank licencing and control...........hell man! the EU and most of civilisation would back you on that one? OK, it would be Bank of England over here etc.........but they all talk together?

No payments without justification?...............if your government won't allow it there is no point in blackmail?

OH! I noticed that the FBI and DOJ illegally closed Megaupload (not that I approve of the fat German *^^$££%).....why can't the "home of the brave and land of the free" do something about this?................ah! no Hollywood backing?

Yeah, I am cynical..............

---

Never mind what I thought of the General and his crew. Since they had diarrhea of the mouth and no brains. Killed a lot of troops because of poor air support.
I'll take the Navy Black ponies any day. Old and slow does a better job.

A few smart bombs in the right places would sure help get rid of the like of RIAA and the like. 10 years ago would have been a better time for that to happen.
Banks talk to each other, never happen as it would probably make the bottom line turn red! Banks = rip off specialist in my book.

Cynical - Yah, I qualify at times too.

"Delta Searchbar" infestations. This maybe of big help.



Download Malwarebytes' Anti-Malware: http://www.malwareby...lwarebytes_free to your desktop.
(Malwarebytesis free to use as a manual scanner. Payment is only required if youwish to have it run and update automatically which is not necessary for our purposes)

***VERY IMPORTANT! Make sure, you update Malwarebytes before running a scan.***

Double-click mbam-setup.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform quick scan, then click Scan.
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click Remove Selected.
When completed, a log will open in Notepad.


The log can also be found here:

C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

Please download AdwCleaner by Xplode onto your desktop.
http://www.bleepingcomputer.com/download/adwcleaner/
Close all open programs and internet browsers.
Double click on adwcleaner.exe to run the tool.
Click on Scan button.
When the scan has finished click on Clean button.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the contents of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[S1].txt as well.

Please download Junkware Removal Tool to your desktop.
http://www.bleepingcomputer.com/down...-removal-tool/
Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

My favorite clean up tool
TFC. or Temp File Cleaner
http://www.bleepingcomputer.com/download/tfc/
Download to your desktop.
CCLeaner, if you leave the registrary cleaner alone is OK>

Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.
Run Temporary File Cleaner (TFC), AdwCleaner and Junkware Removal Tool (JRT) weekly.

If any say there is a update, get from the above address!