I have a client running a Windows 2008 file server. A user's computer was infected with the HELP_DECRYPT virus and uploaded it to the file server. I am able to detect the virus and infected files but am not confident if I remove the virus that it will decrypt the files. I'm also hesitent to remove the infection in fear of losing the capability to decrypt the files. I've read many threads that suggest VSS, system restore, or backups will resolve the issue, but unfortunately this is a brand new client and they haven't had any backups in many months. Any assistance on the issue is appreciated. Thanks.