A customer of mine has been infected with Threat Finder v2.4 trojan that encrypted lots of files on his NAS. We were able to restore several items from backup but unfortunately not everything.
I was wondering now if it would be possible to find the encryption key by some comparison of both the encrypted and original version of several files. Or is that just too wishful thinking?
Thanks a lot for any advice.