Hello, the last night my server with Windows 2008 Server R2 Standard was infected with , AiraCropEncrypted!, the attack use ASP.ISS user, and now all files are encrypted... I have using the EmisoftDecrypter for Nmoreira but since this morning, more than 5 hours the application continue ....:
Starting decryption ...
Encrypted file: C:\DATOSS\Administracion\2013\2013 CONSUMOS 2013.XLS.__AiraCropEncrypted!
Decryption: Trying to reconstruct encryption key, this will take a bit ...
That is normal?? The utility is compatible with this server??
Thanks a lot!!!