A couple of days ago I decided to reset my desktop computer, which is running Windows 10.
After it got reinstalled, I noticed my D and E-drive was emty. So I thought I, by mistake, had selected to clear ALL drives and not just the one with my Windows 10 installation. That WAS a possibility, as I was tired at the time.
Then I got myself a data recovery software, and got everything back - or so it seemed. I uploaded a couple of Excel-files to my onedrive cloud, and wanted to work on them. Unfortunately a message came up, saying the files were corrupted.
Later I found out that the files were not corrupted, byt encrypted. https://www.sendspace.com/filegroup/KYmj1Igo4o53DqbunWdFBwnBYLMY83HyIQB1epns3NsbHSqO7ufb6Q
The SendSpace link contains one of the excel files, a working photo + the same photo, but where it is encrypted. There are also a couple of files named TempFile.txt, TempFile.md5 and TempFile.exe. Those were in a folder I have not created myself, called SpecialDir. When checking the photo + TempFile.txt on https://id-ransomware.malwarehunterteam.com/, I am being told it is encrypted with CryptoWire.
I unfortunately was in the process of organizing files for my OneDrive, which means I had EVERYTHING on my drive ... all 700GB of important data, including photos throughout the past 20 years.
I appreciate all the help I can get!