28 June 2016

Recovering Ransomlocked Files Using Built-In Windows Tools

By benbam

Use a Previous Version

An alternative, if it is a technology in use in your organization, is to restore from a Previous Version.  Previous versions are copies of files and folders that Windows automatically saved as part of system protection. This feature is fantastic at rescuing files that were damaged by malware. If system protection is enabled, Windows automatically creates previous versions of files and folders that have been modified since the last restore point was made.

http://www.symantec.com/connect/articles/recovering-ransomlocked-files-using-built-windows-tools