The key files were on the PC, because my customers just emailed me back that it worked. I had emailed them the ftp link to the recovery tool. This is a great relief to me as well as them. Because it was something automated they were able to do it themselves too, saving me going out there and saving them another service call.

So my thanks to everyone in this thread for sharing your experiences.



Also, if anyone from Dr.Web is reading this thread, my deepest thanks to you. I never gave Dr.Web much thought until now, but you did a good thing here and I'll be investigating the efficacy of your products and services.

Anybody know the name of the encryption key file as my Dr Web decryption program run isn't finding it. I ran Malwarebytes AV intially to remove or quarantine the virus like everyone else did - Isn't this the same way everybody else got rid of the initial virus, leaving all of the corrupted files intact. Not sure why I can't find the encryption key file if others used the same process, as I didn't delete anything manually,- Is there a quarantine folder I need to be looking for.

Any help would be appreciated as I would really like to recover these files that are lost.

Thanks,