How can I find files that cryptolocker has encrypted from file share. My colleague reinstalled the infected machine before I read that it is possible to get file list from registry of infected machine.
So it is not possible to get file list from infected machine because it already has been reinstalled from image. There is thousands of files and folders so it is not possible to manually test which files are ok.
Is there some program that can scan network drive and create a list of files that have been encrypted by cryptolocked virus so that I know what files/folders I need to restore from backup.
Regards,
Petri
ADP-designer