Dorayaki

Kevin, Thank you for your comprehensive answer. That's what I was afraid of. At 3 bitcoins the ransom is substantial though. Is that an avenue even worth pursuing? Thanks again.

Computer was infected via an email attachment. Most files that are MS Office based are now encrypted with the .THOR extension. At this point we have not been able to find any decrypter for this particular version of the a locky ransomware. Perhaps you can help. FRST.txt Scan_161206-175450.txt Addition.txt