help with Locky virus

ethan · 7 Jun 2016 at 15:11

Have run spyhunter. Can anybody advise on next step to gain access to encrypted data. Thanks

ethan · 7 Jun 2016 at 18:17

I believe it was from an email.

ethan · 7 Jun 2016 at 18:30

Showing my ignorance here but on one of the locked files I right clicked the tab for restore previous version only to be greeted by there being no previous version. I'm assuming that once Spy hunter has completed its scan and removed locky, the correct procedure would be to restore to a previous restore point. Would there still be a restore point available prior to infection where those files would be unencrypted? I'm guessing here but I'm assuming there won't be.

ethan · 7 Jun 2016 at 20:53

Shadow copies not there

It appears only to have targeted the pdf's so far; each saying locky). After the scan Spyhunter also appears to request a payment of £26.00 to apply the fix. I haven't got a clue what the IT guy is doing as I was kept out of the loop. Office workers with a talent for opening everything that is emailed are a complete disaster. Anyway, on my PC I've installed the free Bitdefender anti ransom app as a precaution.

ethan · 8 Jun 2016 at 00:45

opethdisciple said:
Could you imagine we reach a point where we are all running dedicated anti-ransomeware software.

For a price

I have an excuse, my eyes start to blur around 2:30 early morning and I an't be sure what I'm clicking.

ethan · 8 Jun 2016 at 20:26

Glanza said:
If it's the proper locky Spyhunter will do nothing.

What will shift it then? I already mentioned I installed the Antiransom ware app from Bit defender as a precaution. This was in p art due to me reading it nicks your email friends lists and then proliferates by sending out emails pretending to be from people you know.

ethan · 9 Jun 2016 at 12:26

Orcvader said:
Wasn't the case for me when it happened with two of my clients, both had a mapped drive to their servers but Locky left it untouched. Although this was about a couple of months ago... so I guess a newer variant could be more aggressive.

I think it is the same here. This particular variant left the network alone, including the other PC'S and only locked the .pdf's on one. It limited itself to the machine on which the virus was opened.