Hello everyone, 24 hours ago I was hit by Cryptowall on my windows 8 laptop. I only put it into safemode after the your computer has been encrypted messaged appeared. There were a total of 6 new files on my desktop named Help_Decypt.html, and JPG images saves from the .html files as 1,2,3,4 and 5. Since then I had tried: 1. Spybot and SuperAntispyware ( my first instinct to check with and they came back negative) 2. Malwarebytes - This detected Help_Decypt.html and removed it. The JPG files still detected as any threat and I removed them manually. 3. Symatec help self-extractor did not show any thing. Norton power eraser - removed two frequently used programs that it found suspicious. 4. Listcwall - showed registry not corrupted, Anti-cryptorbitV2 - did a test run with a bunch of files that did not open and the app came back as not encrypted. 5. Decryptcryptolocker.com - tested it with a bunch of files that woudent open and the site said the file is not encrypted. 6. Shadowexplorer - shows nothing 7. Roguekiller - deleted a bunch of files in the registry and some apps too. but the laptop still faces the same problems. 8. When switched to normal mode - I get IE2.dll failed to load, CMD prompt opens and closes - not sure why this happens because it only appears for a split second, Windows is slower and the mouse freezes. Windows shows that there is a restore point to one month back, but im not sure if that restore has also been effected. What else can I do? Please help Zatspeed
