re: #194 lawhawk

If it’s been encrypted, then the data is likely unrecoverable because you’d need the decryption key to restore the data. Malware/Virus protections wont identify these files as infected.

I was hit with this kind of attack a few weeks back, and it killed all my data files - even with malwarebytes and other software. IT was unable to recover, using all the means at their disposal.

Their suggestion at the time? Make sure you have a thumb drive of data that you rely on, just in case something like this happens.

Yeah, but in this case it looks like they weren’t targeting the central IT systems but the terminals. $300 to unlock a computer and specifying the amount of bitcoins in USD makes me thing they just managed to compromise a bunch of terminals and not the NHS’s databases and other medical records.

The solution in that case is pretty easy, re-image the drives and find some new anti-virus software.