MitchJ

Thank you for your replies, they are filled with great information. is there a decrypter available?

I've tried uploading to the site https://id-ransomware.malwarehunterteam.com/ but i will not copy an infected file to send from another computer. I have a picture of the ransom screen and a picture of the EEK screen showing the list of found infections. RETURN FILES.txt FRST.txt Addition.txt

Came to office to ransomware on our Terminal Server. We are running Windows Server 2012r2. I found the proper steps too late and deleted the files. When I run EEK. it can't find any infections. I do have the logs from FRST and a pic of the EEK screen before i deleted the files. Please let me know how I can help or what I can provide to help. I know I'm not the first desperate tech guy to be in dire straights. ....but I am