Windows 10: Recover encrypted files by virus

Page 2 of 2 FirstFirst 12

  1. Posts : 11,224
    W10Prox64
       12 Dec 2015 #11

    Update:
    The CryptoWall v4 is sneaky now, in that, after deleting the original file, it puts the new, encrypted file in the exact sector where the original was deleted. This makes it very difficult to recover the original deleted file.

    Interestingly, there appear to be certain regions where it does not wish to attack, and if it detects these languages, it will not infect the computer: Russian, Kazakh, Ukrainian, Uzbek, Belarusian, Azeri, Armenian, Kyrgyz, Georgian.

    It is also using drive-by-download techniques and the Angler Exploit Kit, which means that you can be infected simply by visiting an infected website; malicious code is executed via hidden iFrame(s) after identifying unpatched programs/browsers/add-ons, and injected into svchost.exe, bypassing the UAC when deleting all Shadow Copies if you are using an account with administrative privileges, and thus tricking many AVs in the process.

    ref: Security Alert: Angler Exploit Kit Spreads CryptoWall 4.0 via New Drive-By Campaign - Heimdal Security Blog

    ref: Cisco Talos Blog: Threat Spotlight: CryptoWall 4 - The Evolution Continues
      My ComputerSystem Spec

  2.    12 Dec 2015 #12

    Thanks for the info simrick.
      My ComputerSystem Spec


  3. Posts : 11,224
    W10Prox64
       12 Dec 2015 #13

    eLPuSHeR said: View Post
    Thanks for the info simrick.
      My ComputerSystem Spec


 
Page 2 of 2 FirstFirst 12

Related Threads
recover deleted files in General Support
Hello, I realise this problem would be similar regardless of which Windows being used. I partitioned my HD and moved documents to new partition. Mistakenly removed the partition without restoring files. Is there any way of recovering the lost...
Hi guys, I was using Windows 8.1 then upgraded to Windows 10, but all of my personal files has deleted and I tried best of recovery programs and they're not helped me. So, if I roll back to my previous version of Windows, does my personal files...
I was looking for a forum for OneDrive but don't see one... Sorry; I'm new around here! I had a computer completely die (won't boot, Hard Drive won't spin). I have a backup from April but would like to find newer the files if I can! I had...
Hi, My boyfriend was running a bootlegged version of Windows 8. I reinstalled his Windows to a legitimate version of Windows 8 so that he could get the free upgrade upgrade to Windows 10. When we went from Windows 8-->Windows 8, the only...
My friend has been using AutoCAD on fairly new Windows 10 install. No problems till today when he got an error stating he needed to reinstall the OS. I didn't see the error before he shut down. To be safe he pulled his hard drive and asked me to...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 05:50.
Find Us