Hi, my company server was hacked by a hacker on 2/3/19, they encrypted my server all files. They need to buy some bitcoins to send us the key to the decryption tool that will decrypt all my files. But what can I do now?
My company server was encrypted by ransomware
Cherry, |
Ask a question
Community Answers
Your opinion regarding My company server was encrypted by ransomware
You must be logged in to post a comment.
Ransomware is a type of infection that will leave the encrypted files behind, even after its removal. Therefore, it is vital to keep your company's networks protected by adequate security measures, such as antivirus program, firewall network security software, Monitoring Tool, Bot Mitigation, data encryption - to name a few.
Security holes might result in devastating consequences. However, the good news is that, if you had backups, your recovery procedure should be relatively easy to perform.
First of all, you should remove malware from the entire network of computers that are infected - it is best to be done by the IT staff. In case such does not exist, you might want to install reputable security software and perform full removal procedure in Safe Mode with Networking. Only then you should proceed with file recovery procedure.
In case you do not have backups, the file recovery might be extremely complicated. Nevertheless, there are several third-party recovery tools that you can use - Data Recovery Pro, ShadowExplorer, and others.
Experts advise not to pay the ransom, as cybercriminals might simply take the money and never send you the decryptor.
Finally, depending on which ransomware locked up files your network, decryption tool might be available from here or here.
Good luck,
2-spyware team