📎 AI Summary:
The original poster reports a recent ransomware attack on their server, partially recovered but still missing some files, and inquires about professional data recovery services. A responder indicates that while recovery might be possible if decryption keys are available—such as through a security flaw or network capture—generally, restoring from backups and improving endpoint security are the most effective strategies. Overall, the discussion emphasizes that professional ransomware data recovery is unlikely unless specific decryption methods are obtainable, making preventive measures crucial.
K

klabacita

Extraordinary Member
Member details
Joined
Oct 1, 2012
Messages
8
Thread Author #1
Hello.

We had last week a ransomware attack, our server where infected, we already have our services running.
The server is here with us, we didn't recover all files.
The question is, exist a company that could safely recover files from infected systems with ransomware?
Thanks all for your support.
 

Solution
Neemobeer
Yes, but realistically probably not.

You can if one of the following has occurred
  • With the ransomware identified (someone such as a security researcher has discovered a flaw and created a decrpytor)
  • You implement SSL decrption at the perimeter, capture network traffic and were able to capture the key for the ransomware)
The other option is potentially brute force decryption which is in most cases is unrealistic and could take many years to brute force

Restore from backup is your best option and implement better end point protection to prevent ransomware in the first place.
Neemobeer

Neemobeer

Windows Forum Team
Staff member
Member details
Joined
Jul 4, 2015
Messages
8,994
#2
Yes, but realistically probably not.

You can if one of the following has occurred
  • With the ransomware identified (someone such as a security researcher has discovered a flaw and created a decrpytor)
  • You implement SSL decrption at the perimeter, capture network traffic and were able to capture the key for the ransomware)
The other option is potentially brute force decryption which is in most cases is unrealistic and could take many years to brute force

Restore from backup is your best option and implement better end point protection to prevent ransomware in the first place.
 
Solution
You must log in or register to reply here.