Please pass this on to your employees: If anyone should see a message on their computer with ANYTHING about your "data has been encrypted". That they should unplug the power from the computer immediately, along with the network cable. If they are unsure which cables to unplug, unplug them all. Then call me. This can be in the form of a countdown on the screen, to a webpage. Sometimes it changes the desktop background to the encryption notification with a countdown. This virus is going around again and it is better to be safe than sorry. Seconds matter with this virus. It encrypts the computer then starts encrypting all mapped drives on the server that that user has.
If you have any questions please give me a call.
Cell (704) 995-5438
Office (704) 706-2088