I have a computer here that seems to have most, if not all, documents/pictures etc. encrypted. This is a friends computer and it appears that malwarebytes has removed the virus, but the files are still affected. Each folder that has encrypted files also contains two documents...DECRYPT_INSTRUCTION(HTML document, but doesnt take you anywhere) and DECRYPT_INSTRUCTION(text document, but access is denied).
I have tried https://www.decryptcryptolocker.com/, but this says that the files are not infected by Cryptolocker. I have also tried Shadowexplorer, but it doesnt go back far enough.
I am not sure how to proceed at this point. Some Word documents show the file conversion dialog box hoping that certain encoding will make your document readable (none do) and others just say the file is corrupt and cannot be opened.
I appreciate any help.