Thanks for sharing. I've so far recovered ALL infected files on one person's laptop - I guess 6 months ago - from this virus. It was very annoying. The way I recovered it was pretty simple once I figured it out, and found resources online. Windows stores shadow copies of everything until you clean it out. On this machine, nothing had been cleaned out, thankfully, and the shadow copies were 100% virus free, best I could tell. Well, I found a program online (free) that could be used to create copies of files from the shadow backups (shadow explorer I believe it is called), and then just wiped the system down, re installed, and restored data files, and off back to normal life they went (until they apparently fried the same laptop while at a hotel, they think).
Anyway, that's good news to know in case anyone runs into that again - they can contact these folks now to get help, and not worry about the whole ransomware aspect.
"But thanks be to God, which giveth us the victory through our Lord Jesus Christ." 1 Corinthians 15:57
