Paycrypt@aol File encription

Hi has anyone else got the paycrypt@aol file encryption? I have 2 clients that have now got all there data encrypted with an id and paycrypt@aol. seems to have come down around 9 pm last night.
LVL 1
LewisNetworking Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

StolsieCommented:
Nope.
First off
You need to remove the infected clients from your network, before it encrypt your entire network file storage.
You need to take and scan all external sources that have been on those machines (staffs USB sticks and the like)
LewisNetworking Author Commented:
it looks like it came down onto the server. the company closes at 17:00 and all the times on the files across multiple sites are 9:20pm.
StolsieCommented:
have you got a back up of the data on the morning before infection?
anyone use your server for anything?
the source will hopefully be from a client desktop, as you probably don't youse your Domain server for surfing and opening e-mails
type "at" in CMD to see if a schedual has been setup.
you will need to see what services are running that you don't know of or have an un known manufacturer.
Starting with Angular 5

Learn the essential features and functions of the popular JavaScript framework for building mobile, desktop and web applications.

LewisNetworking Author Commented:
Yes I have a backup of all the data. I'm currently restoring all the data. checked all the services etc everything is fine strange as I don't know how it came down.
StolsieCommented:
and have you checked on the two desktop clients?
have you got a good AV on your systems?
are permissions set on staff folders so they don't have permissions to right every where, that helps prevent the spread.
if you got logging in place it wont be hard to track down who, how, where and when.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
LewisNetworking Author Commented:
Thanks for your input
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Encryption

From novice to tech pro — start learning today.