TeslaCrypt Virus

[Caliph]

Friend got infected with TeslaCrypt ransomware

 

All txt files turned into mp3 or some kind of music extension, and of it wasnt backed up on the main disc of the company, is there any solution to this, tryed scanning with malwarebytes and EndPoint Security.
The virus also removed system restore points and previous versions of the file.

 

Are there any programs which are able to handle this?

[CJPowell27]

You could always try booting into safe mode and looking for where the ransomware is rooted in, deleting that and then trying Malwarebytes

I don't think there is a way of recovering it as it is encryted, basically your friend messed up real good.  Not sure if there are any tools

 

Edit: Apparently there is a tool as said under me

[NeoFrux]

Well, that sucks. But there's good news - Cisco has developed a TeslaCrypt decryptor tool called TALOS. Scroll down to the heading "The Talos TeslaCrypt Decryption Tool" heading for the start of the relevant section (the previous sections discuss the technical details of TeslaCrypt). With any luck, you should be able to restore the files. Make sure the system is clean first though - No sense in decrypting everything just to have it encrypt all over again!