Hi Everyone, It seems that cryptolocker has strike again. I have a remote server (currently shut down) that yesterday had all his files "encrypted". How can I discover which virus it is and possibly fix the issue?
Thank you all for your help!
Hi Anton Sivic:
I'd suggest you post in bleepingcomputer's special malware removal forum dedicated to the identification and removal of ransomware called Ransomware Help & Tech Support.
Please read xXToffeeXx's instructions pinned at the top of that board at How to Post a Topic Asking for Help With Ransomware before starting a new topic. There is a link in those instructions that will direct you to the ID Ransomeware site at https://id-ransomware.malwarehunterteam.com/ (still in beta) that is maintained by malware removal expert Demonslay335. You can can upload ransom notes, sample encrypted files, etc. on this site and it might help you identity which of the ~ 370 currently active ransomware programs you are infected with.
------------
32-bit Vista Home Premium SP2 * Firefox ESR v52.1 * NS Premium v22.9.1.12 * MBAM Premium v2.2.1