System has been infected from CERBER RANSOMWARE, how to recover data

simrick · 10 Oct 2016

Hi.
Unfortunately, as already stated, there is no current solution for decryption of v3 of Cerber Ransomware.
Following the BleepingComputer topic, as was suggested, and keeping a copy of your encrypted data is recommended.
Since Shadow Copies is not an option, you might try a recovery program, to see if anything can be recovered. Some have reported some success with Recuva, R-Studio, Phoeorec, DiskDigger (from Hiren's CD). If you have pictures on Google Photos, they should be available. Data on OneDrive or Dropbox can be recovered by way of file history. I have heard that KrollOntrack may be able to recover files, but this is a recovery process as well, and not a decryption process, and is a paid service.

Layback Bear · 10 Oct 2016

Just a thought.

If the email attachment did cause the problem I would recommend advising the sender of the email so it does not get sent any more. Of course I'm assuming that the attachment was sent to you by someone you/employee know and that is the reason you/someone opened it.