Hit by a ransomware - trying to recover probable deleted files with Recuva

Recuva
1

Hi guys,

I was hit with zepto ransomware which encrypted most of my files.

I have read that zepto makes copies of the files, than deletes the originals,

I am trying to recover the originals with Recuva and than gonna try to user Shadow Explorer to bring them back (or if Recuva can bring them back by it self).

Am I doing all this for nothing? Can it work?

Thanks for the help,

2

It's unlikely it will suceed at the moment I'm afraid :(

See here

http://www.bleepingcomputer.com/forums/t/605607/locky-ransomware-support-and-help-topic-locky-recover-instructionstxt/page-28?do=findComment&comment=4079264

The goto forum for Ransomware has a 23 page thread on Locky/Zepto

http://www.bleepingcomputer.com/forums/t/605607/locky-ransomware-support-and-help-topic-locky-recover-instructionstxt/page-28

You should be able to clean up all the ransomware notes at least using 2nd from top link at this page.

http://www.bleepingcomputer.com/forums/f/239/ransomware-help-tech-support/