Ransomeware/cryptolocked files question

[KK_KK]

One of my clients has been infected with <filename>.locked and I already ran many tools from Kaspersky and AVG for a possible decryption; all failed.

My client wanted to pay the ransom, but the "hacker" has not replied and the time for expiration is long past. Is there any way to recover these files?

Note: Their local backup was affected as well. Previous IT just connected a home grade external HDD for "sync backups."

 

[Markverhyden]

Have you done a AV scan to check the infection name? At any rate their SOL unless the name gives you some other options.

 

[Porthos]

https://id-ransomware.malwarehunterteam.com/
ID Ransomware
Upload a ransom note and/or sample encrypted file to identify the ransomware that has encrypted your data.

 

[GTP]

Emsisoft, www.emsisoft.com have some decryptors and advice about many ransomware variants.
They are also very willing to help you decrypt the files without paying a ransom.
Check them out.

 

[KK_KK]

unfortunately it's hit with the beauty and the beast. storagecrypt. I think I'm out of luck, but i may try loading linux and trying photorec.

 

[Porthos]

but i may try loading linux and trying photorec.

Wase of time. You wont decrypt them.

 

[GTP]

Did you contact Emsisoft to at least discuss it with them?

 

[KK_KK]

Wase of time. You wont decrypt them.

Tried and you were correct. Wasted my time.

 

[KK_KK]

Did you contact Emsisoft to at least discuss it with them?

No, but I definitely will try!