1

Anyone has solution for crannbest@foxmail.com virus. The virus managed to disabled avast and encrypt almost all the files in the server.

2

No More Ransome >> https://www.nomoreransom.org/

ID Ransomeware >> https://id-ransomware.malwarehunterteam.com/

Upload a ransom note and/or sample encrypted file to identify the ransomware that has encrypted your data.

3

It is not a virus, but ransomware.

4

Nice. IP is in China.

5

Read this: http://myspybot.com/wallet-file-virus/

While you seek help from a qualified malware remover, you could read here:
http://virusguides.com/remove-crannbestfoxmail-com-ransomware/

polonus