May want to give this a read
http://www.bleepingcomputer.com/virus-removal/cryptowall-ransomware-information
Whatever you do do not pay them, there cyber thieves and there is no guarantee that your files will be unlocked
If you have your photos and documents backed up to a CD, USB Thumbdrive or External Hard drive do not plug those into the infected computer
Its possible for Malwarebytes to remove this infection but I am afraid your files are lost, if this was me I would do a reformat of the hard drive and a clean install of windows , this will guarantee a nice clean computer, if you want to continue than run RKill, it wont remove anything but will tame the infection down so Malwarebytes can run
- Please download rkill (Courtesy of Bleepingcomputer.com).
1. rkill.exe
2. rkill.com
3. rkill.scr
4. WiNlOgOn.exe
5. uSeRiNiT.exe
Note: You will likely see a message from this rogue telling you the file is infected. Ignore the message. Leave the message OPEN, do not close the message.
Run rkill repeatedly until it's able to do it's job. This may take a few tries.
You'll be able to tell rkill has done it's job when your desktop (explorer.exe) cycles off and then on again.
=========================================================
Download Malwarebytes' Anti-Malware to your desktop.
Windows XP : Double click on the icon to run it.Windows Vista, Windows 7 & 8 : Right click and select "Run as Administrator"
[external image: MBAMDashboard_zpsddef9b5f.gif]
On the Dashboard click on Update NowGo to the Setting TabUnder Setting go to Detection and ProtectionUnder PUP and PUM make sure both are set to show Treat Detections as Malware Go to Advanced setting and make sure Automatically Quarantine Detected Items is checkedThen on the Dashboard click on ScanMake sure to select THREAT SCAN Then click on ScanWhen the scan is finished and the log pops up…select Copy to Clipboard Please paste the log back into this thread for reviewExit Malwarebytes
