Virus Removal – CryptoLocker

WARNING Gold Coast – Opening an Email from Auspost has infected 5 of our clients computers in the last 4 days. The email is normally titled “An agent was unable to redeem the parcel to your place for the reason: receiver was absent”.

Out of the 5 infected computers we have been able to remove the virus and recover files on all but one of them.

CryptoLocker is a file-encrypting ransomware, which will encrypt the personal documents found on victim’s computer using RSA-2048 key (AES CBC 256-bit encryption algorithm). CryptoLocker then displays a message which offers to decrypt the data if a payment is made within 96 hours, otherwise the data will be destroyed.
CryptoLocker will add the .7z.encrypted extension to all your images, videos and other personal documents.

The best thing to do if you are faced with the CryptoLocker Ransomeware virus is to shut down your computer immediately and give us a call. The longer you leave your computer on the more and more files and backups the Ransomeware will encrypt.