- The server was infected this past weekend with a crypto virus from “rescuerr” the link explains which crypto virus my server and all workstations have
https://www.pcrisk.com/removal-guides/16113-medusalocker-ransomware
I have a Windows server 2016 standard running on an HPE ProLiant DL 360 G8
- it is two volumes on hardware array (C + D drives)
- it is a standalone server running a specific application. It is not in a domain environment
- I'm using Carbonite to back up the database to the cloud
- I'm also using the built-in Windows server backup to create daily bare-metal backups. I confirmed the last backup was successful
- I do not have a rescue disk. But I do have the original Windows server 2016 DVD
Questions
- since this server has been compromised and there really aren't any tools to clean the server, is it best to boot from the Windows server 2016 DVD and format the two volumes prior to performing the bare-metal recovery.
- Recommendations for recovery
Thanks!
ASKER