r0k_steady

Just in case anyone else runs into this, we managed to restore the affected files to a previous version using Shadow Copy. Not sure if this resolved the underlying issues though.

Morning All, Has anyone heard of this obamausa7 virus/ransomeware or more importantly have a removal tool for it? One of our servers was infected overnight. It appears to have encrypted a whole load of files and is obviously asking for cash in return for the decryption key. Searching on Google only brings up a handful of results, none from reputable AV/spyware companies and all use the same wording so look a little suspect. All were written around the 24-26th November so it looks fairly new. Any help getting rid of this would be greatly appreciated. Thanks in advance. RS.