I have a computer infected with CryptoLocker Virus which has encrypted all the files. The user had the backup drive attached when the virus was activated so the backups are encrypted too.
I have uploaded a filename.doc.encrypted file to the www.decryptcryptlocker.com site but it returns Invalid file The file does not seem to be infected by CryptoLocker.
The computer does not show any previous versions of files so the volume shadow copy seems to have been deleted even though there are restore points listed.
I do have an original file and an encrtypted file as I read that you could upload both to a site which could decipher the encryption from both states but I can't locate this site.
Can anybody help me with this?