Solved

CryptoLocker Files

Posted on 2014-01-14
3
492 Views
Last Modified: 2014-01-15
I have a client that was recently hit with the CryptoLocker virus.  We have it cleaned off, but of course there are corrupted/encrypted files that they need access to.  This only seems to have effected Word, Excel, and PDFs, but not all Word, Excel, or PDFs.  Its very random on which files are corrupted and which ones open normally.  We have restored from backup as far back as 1 month ago but the files are still corrupt.  I have also tried restoring from our offsite backup vendor and those files are corrupt.  How can I get those files fixed or restored properly? Any help is greatly appreciated.
0
Comment
Question by:jhaysbns
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 81

Accepted Solution

by:
David Johnson, CD, MVP earned 500 total points
ID: 39781085
unfortunately your client is screwed without a backup you have to pay the ransomware within the 72 hours time frame


Cryptolocker prevention kit
0
 
LVL 21

Expert Comment

by:CompProbSolv
ID: 39781272
I've run into this on just a few computers, but the symptoms appeared very quickly (within a day or so) from the infection.  Is it believable that the virus hit over a month ago?

Have you tried restoring those data files to a computer that has never been hit with this virus?

The only solutions that I have seen are these:
1)  Pay the ransom within 72 hours
2) Restore from good backup
3) Use "Restore Previous Versions"
0
 
LVL 27

Expert Comment

by:tliotta
ID: 39781441
Nothing to add. The only known answers are already given. This comment is only intended as an extra bit of confirmation.

Tom
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article was originally published on Monitis Blog, you can check it here . Today it’s fairly well known that high-performing websites and applications bring in more visitors, higher SEO, and ultimately more sales. By the same token, downtime…
Determining the an SCCM package name from the Package ID
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

690 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question