Thanks for your reply, Yes is not encrypted but the files were working before the virus so it seems that the after the virus some how the files were corrupted.
Thanks.

Someone else came to me with this same issue. He sent me a file to look at and see if I could figure out what was going on. I loaded it up in a hex editor and this is what it looked like for the majority of the file.

http://i1151.photobucket.com/albums/o630/MosesofEgypt/example_zps3d71c2b8.png

It contained a boatload of redundant data with a specific structure to it. This is NOT how cryptolocker’d files look, nor anything encrypted in general.

Cryptolocker files are structured like so:

first 20 bytes: SHA1 hash of AES key, used to verify file is cryptolocker’d
next 256 bytes: AES key encrypted with RSA key
rest of the file: original file encrypted with AES key(data is padded to the next multiple of 16 bytes)

There is no visual organization to cryptolocker files since everything is supposed to look like random garbage. I’ve looked more closely at the file that was sent to me and I’ve noticed some human readable text so I know the file is absolutely not encrypted, but it might be edited in a way to make it normally unreadable.

I’ll look into this more, but it’s safe to say that if my program says the file isn’t encrypted, it’s likely had something else done to it. Load the file up in a hex editor and see if it looks like random garbage or if you can find some kind of pattern to it.

Encryption has two parts. One part is the public key and the other part is the private keys. You need both parts to decrypt files.

I don’t know of any way to do decryption with only one part of the keys. It’s kinda like trying to unlock a door or start your car with one half of your key, it doesn’t work.

I am trying to help a friend to decrypt the files but he reinstalled the OS and saved the encypted files. Thank You

You do not create the .bin file from the .reg file. You can use the .reg INSTEAD of the .bin. Just place the .reg in the root folder like you would with the .bin, but make sure that you do not have other private keys in the folder. The program will use the first one it finds in alphabetical order and if it finds the example one first it’ll use it. It wont use them if they’re in a subfolder though. Let us know if it worked for you.

The cryptounlocker root directory is the folder that contains “Crypto-Unlocker-V1.1.5-Run.py”