Windows 10: Deadbolt Ransomware encrypted all my Onedrive files

All my files in OneDrive have been infected by Deadlock Ransomware, is it possible to get the files restored with the backup from last 20days? Is it possible? how to request it?

:)

 

Filed encrypted by Tor ransomware

More information is needed to determine specifically what infection you are dealing with since there are many variants of crypto malware (file encrypting ransomware).
RSA-4096 / RSA-2048 / RSA-1024 / AES-256 / AES-128 are
encryption algorithms and not an explicit way of identifying a particular ransomware infection.

Are there any obvious file extensions appended to or with your encrypted data files (i.e. several random hexadecimal characters, words or email addresses)? If so, is the extension the same for each encrypted file or is it different?

What is the actual name of your ransom note? These infections are created to alert victims that their data has been encrypted and demand a ransom payment. Check your documents folder for an image the malware typically uses for the background note. Check the
C:\ProgramData (or C:\Documents and Settings\All Users\Application Data) for a randomly named
.html, .txt, .png, .bmp, .url file. Most ransomware will also drop a ransom note in every directory/affected folder where data has been encrypted.

The best way to identify the different ransomwares is the ransom note (including it's name), the malware file itself, any obvious extensions appended to the encrypted files, samples of those encrypted files and information related to the email address used
by the cyber-criminals.

You can submit samples of encrypted files and ransom notes to ID Ransomware for
assistance with identification and confirmation. This is a service that helps identify what ransomware may have encrypted your files and then attempts to direct you to an appropriate support topic where you can seek further
assistance. Uploading both encrypted files and ransom notes together provides a more positive match and helps to avoid false detections.

After gathering that information, please read and follow the instructions below.

• How to Post a Topic Asking for Help With Ransomware

 

Ransomware & OneDrive

Hi folks,

Am I correct in assuming that, should a pc be hit by a ransomware virus and the files are encrypted then files in the local OneDrive directories would be encrypted and these encrypted files would be synchronised with the remote ones rendering both versions
useless? This would equally apply to any other cloud storage.

 

How can my files on onedrive get corrupted by a ransomware attack?

US-CERT Alert (TA13-309A) advises some crypto malware variants have the ability to target, find and encrypt files located within
network drives, shared (mapped network paths), USB drives, external hard drives, and even
files stored on cloud services (cloud storage drives) if they have a drive letter. Although cloud backups typically do not use drive letters, many cloud storage services do not save prior file versions so there’s no way to revert to a clean
file version.

OneDrive is Microsoft's
free data hosting cloud service that allows users to sync files and later access them from a web browser or mobile device. I do not use OneDrive, but from what I understand the source data (like

GoogleDrive) resides locally in the OneDrive folder. If that gets encrypted by ransomware, it will get encrypted in the Cloud service as well since it gets automatically synchronized. However, according to Microsoft, OneDrive
has the capability to restore files affected by ransomware by using Version History or restoring from the OneDrive Recycle Bin...see

OneDrive vs. Ransomware which includes links with instructions for recovering OneDrive-based files using Version History and the OneDrive Recycle Bin.

• How to Deal with Ransomware: How can I remediate a ransomware attack?
• Because Ransomware: OneDrive for Business to Get "Files Restore" Option