SQL has encrypted mdf files

[MarkRyan]

Hi, we were hacked by a very bad virus today. Which my one of my I.T. staff decided to tell me our last backup of the sql databases is 12 days old.
The virus has encrypted the mdf files, but not touched the ldf files. Also our T-log backups are not available but we have a full t-log from the original server.
Is there any way we can take a 12 day old backup of the mdf files and some how bring it up to date by importing the ldf files?

 

[Uhtred]

As long as you have the latest full or diff and the transaction logs I think you should be OK. This page explains it pretty well https://msdn.microsoft.com/en-GB/library/ms177446.aspx

 

[Rroff]

Make sure that ideally you take a copy of any backups in isolation and then restore from the copies and avoid mounting any backups anywhere connected to the infected systems especially with write privileges.

Some of this cryptolocker type stuff is increasingly sophisticated or deployed with a cocktail of other malware that can hide away on the network to reinfect stuff later.