my services were deleted by haker

hello i have exchange 2013 and i surfer an attack by ramsom i pay de pirate resgate but my exchange were delete the services can any body help me to fix this problem
carlos barrosAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Scott CSenior EngineerCommented:
At this point, your Exchange environment has been severely compromised.

You need to restore your Exchange from a backup that isn't affected, or you will need to rebuild your Exchange environment.

How many Exchange servers are we looking at?
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
JohnBusiness Consultant (Owner)Commented:
Since ransomware can affect more than Exchange, if you decide to rebuild Exchange, you might be as well or better off to backup and rebuild the servers entirely,
1
carlos barrosAuthor Commented:
I already clean the ramson virus the pirate after pay give me the decryption key, but wen the pirate use the ProcessHacker to stop the services, delete some of the services I see that In Microsoft some time ago there was a tool to fix the services but now it is unviable at this time may some body have that tool, all the data base is ok only the services are deleted.
0
Shaun VermaakTechnical Specialist IVCommented:
Export services from working Exchange Server. You can build a quick VM with Exchange installed and export the services from Registry but as mentioned in other posts, I will not trust the server
0
JohnBusiness Consultant (Owner)Commented:
Good answers provided.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.