From: "Buffalo" 

> "FromTheRafters"  wrote in message 
> news:ma98km$e8r$1@news2.open-news-network.org...
>>
>> Buffalo laid this down on his screen :
>>> Any method of restoring any of those files?
>>
>> Restore them from the backups. I know, I know, but it has to be said.
>>
>> No Vista OS disc might mean it has a restore to factory/recovery 
>> partition instead.
>>
> Yes, it has a Recovery partition.
> He didn't even have System Restore turned on, let alone any backups. :)
> I just posted in case someone found a 'new' way to recover those files.

This is a Crypto Trojan, not a virus, and uses the MS Crypto API. 
Decrypting is not possibe; without a key.

System Restore would not help.  It works on EXE, DLL, the Registry and OS 
constructs.  It does not work on data files which is what ransomware 
targets.



-- 
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp 

--- NewsGate v1.0 gamma 2