If the affected computer has not been rebooted after being infected and the associated memory has not been allocated and erased by some other process, then there may be chance to get back the encrypted files…
Can I recover the encrypted files or should I pay the ransom? Decryption of encrypted files is not possible at present. If you have backup copies of affected files, you may be able to restore them. Symantec does not recommend paying the ransom. In some cases, files may be recovered without backups. Files saved on the Desktop, My Documents, or on a removable drive are...
Read More
