hi, after getting cryptolocker virus a couple of ties in my office, i have in mind a software utility that gives an alert whenever an application starts to rename files or cript files in a pc or specific shared folder of a network workgroup (since cryptolocker family virus after beeing launched they rename local files and shared folders files). I'm also open to any idea that helps me fight this virus (i understand nothing can prevent it but being allerted very soon after infection can limit a lot the demage )
I can help you make a small application to monitor when files are starting to get renamed by the Cryptowall virus. I am a software engineer but I also am a security analyst and I have worked with the Cryptowall virus before. I can also help you prevent from getting infected in the first place by placing certain detection in emails/ detecting file signatures before the virus has a chance to run on your network.
I have experience with working with Cryptowall v3 and v4, CryptoLocker(cryptowall derivative) and Teslacrypt, a cryptowall derivative.