His files are encrypted by KeyHolder and the system restore points are all gone.
"It went through My Documents and partially or completely encrypted half the files but left the file name. In each folder it affected it left a how_decrypt.gif and howdecrypt.html. I tried cleaning it with Anti-Malware and then attempted a System restore. But upon rebooting Windows said system restore failed because one file could not be restored, but then all System Restore Points and Previous Versions for files were gone :( ."
KeyHolder Decryption
KeyHolder, like CryptoWall and CrytoLocker, is a file-encrypting ransomware created to blackmail money by encrypting files on the computer. Once you are infected with KeyHolder, it begins to scan your files and then encrypt all of them after you log in the windows. After the encryption is finished, a screen requiring $500 USD ransom is displayed and instructs you how to pay the ransom and decrypt the files. It also threatens you that the guarantee recovery is provide within 10 days. That’s to say if you don’t pay for it within 10 days, you will lose your files. The recovering files by paying for the ransom may be just a scan. I think you don’t have to pay for the ransom at first, you can try these 2 solutions to restore your files.
Before you try the recovering-files solutions, you need to do one thing first: download and install an antivirus program to block KeyHolder.
Before the all the files being encrypted, you should install some strong antivirus program to detect and block KeyHolder to stop it continuing to encrypt your files. Unfortunately, most of the computer users isn’t aware of this. They don’t know KeyHolder is on their computer until they get the requiring paying ramsom screen. The scan with the antivirus program at least can detect KeyHolder and remove all the malware coming with KeyHolder.
Download and Install Spyhunter to block and stop KeyHolder
Step A. Download removal tool SpyHunter
1) Click here or the icon below to download SpyHunter automatically.
.png)
Step B. Run SpyHunter to block it
Run SpyHunter and click "Malware Scan" button to scan your computer, after detect this unwanted program, clean up relevant files and entries completely.
Step C. Restart your computer to take effect.
Very Important:
Any activities on your PC should be performed after blocking KeyHolder with an antivirus program, or the file recovery would become more difficult. Download and Install Spyhunter scanner to block KeyHolder.Solution 1 to get back your files:
If you have been performing the backups, you really can get back your files from the backups. If you haven’t been doing the backups, please learn the lesson to do it from now on and try solution 2 to restore the files.
Solution 2 to get back your files:
It’s found that KeyHolder will make a copy of your files, encrypt the copy and then remove the originals. Thus you can try to install a file recovery software to restore the files deleted by KeyHolder. Attention: please try not to do anything on your PC until you know how to block it since the more you use your PC, the more difficult it can be to recover the files for the recovery software.