This is annoying, but I thought I would try to help anyway.

A co-worker of my wife's, husband called me (yeah never talked to the guy before in my life, but he calls asking for help). He's a cop and served several duties as an MP in IRAQ and other bad places. I do appreciate his service!

So he tells me that he has a laptop and external HDD that have been infected with Cryptowall 3.0 (ransomware), that has encrypted all of his files and he cannot open any of them. He also tells me that he has personal, law enforcement, and military files on them(?) He explained that a message is popping up, requesting $500 within 30 days or his files will be permanently encrypted and useless. He also said that he tried connecting the external HDD to another PC, and was still not able to open them.

THEN he tells me that he's given the laptop and HDD to a Professional PC guys that specializes in removing Viruses, etc. (??)
THEN he asks me what he should do!!?? (remember he's already given it to a "Professional")
(I explained that I am totally unfamiliar with this particular virus, but I'd do some research and ask on this forum)

I really don't know what he wants me to do at this point (all I have is what he told me over the phone and I do not have his laptop or external HDD)

Anyone know about this? I've done a couple searches and Malwarebytes claims they can remove it, but the files would need to be restored from backups (which I don't know if he has).
Removal instructions for Cryptowalll/

Here's a Youtube video showing how to pay in Bitcoin ($500 initially, $1000 if you wait longer):


Best I can tell, the files are not recoverable.