CryptoLocker & Webroot performing journaling and rollbacks

  • 25 November 2014
  • 1 reply
  • 54 views

Hi All
 
One of my endpoints has been using Webroot for a couple of weeks now and in the last 24 hours has been infected by CryptoLocker.  The damage has been contained to the local pc only and hasn't infected any network shares.  After doing some investigating, I can see Webroot claoms to be the only antivirus software that can clean Webroot.
 
My question is simple.  How do I go about activating the roll back technology so I can restore the endpoint to a time prior to infection?
 
I hope there is good news
 
Regards
Matt.

1 reply

Userlevel 6
Hello @ and welcome to the Webroot Community!
In this special case I would advise you to contact Support and ask them for assistance.
WSA journals every change made by Cryptolocker so you've got a good chance that your files can be recovered, but if anything goes wrong in this process you won't have a second chanceM so it's best that you let Support handle this.
 
https://www.webrootanywhere.com/servicewelcome.asp
 
Please keep us updated on this topic and if Support was successful in recovering your files!
 
 

Reply