AbuXI Posted June 16, 2014 Member ID: 27198 Group: *** Clan Members Followers: 37 Topic Count: 38 Topics Per Day: 0.01 Content Count: 204 Content Per Day: 0.07 Reputation: 256 Achievement Points: 2135 Solved Content: 0 Days Won: 2 Joined: 08/17/18 Status: Offline Last Seen: May 8 Birthday: 08/25/1968 Device: Windows Posted June 16, 2014 Can I recover encrypted files? Awards
Sitting-Duc Posted June 16, 2014 Member ID: 561 Group: ++++ Senior Admin Followers: 85 Topic Count: 496 Topics Per Day: 0.08 Content Count: 5355 Content Per Day: 0.88 Reputation: 4629 Achievement Points: 41498 Solved Content: 0 Days Won: 29 Joined: 10/14/09 Status: Offline Last Seen: Thursday at 08:55 PM Birthday: 04/06/1992 Device: Windows Posted June 16, 2014 If you have file history enabled or another backup system then yes from that otherwise it's pretty hard. There have been some advancements made with using software such as https://www.piriform.com/recuva to retrieve the files. Depending on the variant of the ransomware (I am unsure of the specifics of yours) the 'encryption' process creates the new encrypted file before deleting the original which does leave the data for recovery. Ensure that you have removed the virus before you start trying to recover files though. Good luck. Awards
Recommended Posts