Remove CryptoWall virus

WHAT IS CRYPTOWALL?

CryptoWall is a very dangerous ransomware that was released for generating the money. In order to fix and restore your files, you will be offered to pay a ransom of $500. In most of the cases, it should be paid in Bitcoins and the payment should be transferred via Tor (anonymous web browser). This money transfer method is usually used by hackers and cyber criminals in order to hide their identity.

For more details about hte virus you can visit Symantec web site i.e "Trojan.Cryptowall"

There are two telltale signs that indicate CryptoWall has compromised a host computer.The most common indication will be the appearance of three files at the root of every directory that contains files that were encrypted by CryptoWall. If CryptoWall infects the system, it leaves DECRYPT_INSTRUCTION.txt, DECRYPT_INSTRUCTION.html, and DECRYPT_INSTRUCTION.url in every single folder that it encrypts. Also, this ransomware starts showing such alert:

HOW TO REMOVE CRYPTOWALL VIRUS?

As per mt experience - I just follow the instruction and provide them my original id proof and complete the transaction of $ 627 for bitcoin. After few hours they verified the amount and provide me one "TRANSACTION ID" through mail.

I use that id and select PAY option to complete the transaction. After few hours they provide me one zip file (decrypt.zip). In that zip file i found 3 files decrypt.exe, private.key and public.key.Scan each drive with the decrypt.exe file. And finally I recovered 85% of my data.

CRYPTOWALL VIRUS SCREENSHOT