A client of mine gave me his PC to try to recover anything I could from. He explained that he had gotten what he thought was CryptoLocker on it & had missed the deadline for paying the ransom to decrypt his files. Most of what's on there is his & his family's pictures & home videos... you know, the easily replaceable stuff!!
I had come here, as I always do when I've got something like this that I've not seen firsthand before. I downloaded & ran ListCrilock, but it ran for literally half a second & found 0 encrypted files. If I pick a folder at random (in this case a folder of pictures), all of the files are filename.jpg.gdpmbtd. If I remove everything after the .jpg file extension, it tells me the file I'm trying to open can't be opened because it's either damaged or corrupted.
I'd like to try to recover something for this guy, but I'm not sure what, if anything, I can do at this point. Does this sound like what Cryptolocker does? If so, is there anything I can do?