nero 0 Posted March 23, 2017 Posted March 23, 2017 Hi I'm newbie here My client was been hit by .crysis ransomware last january and it was been decrypt by that tim by esetcrysisdecryptor. Now march was been hit by .wallet ransomware and we can't find a solution for this. can anyone help me how it is happen to my client server. we are using eset file security 6.2.12007.0 i also have all the logs
Administrators Marcos 5,742 Posted March 23, 2017 Administrators Posted March 23, 2017 Unfortunately, files encrypted by Filecoder.Crysis (.wallet) cannot be decrypted. We recommend keeping them in case that decryption will be possible in the future. Were the encrypted files located in shares that other users (or everyone) can write to? Do you have ESET configured for maximum protection, ie. is LiveGrid enabled and working? You could provide me with logs collected by ESET Log Collector to review your ESET configuration.
Recommended Posts