Jump to content
Covecube Inc.
  • 0

Ransomware and re-adding drive


This morning my server was hacked and the hacker encrypt all of my drives with bitlocker.

Now he gave me a password to unlock it and it was successful so i unlock all drives.

But now on bottom right tray there's a multiple encrypting drive X... in progress.. 

There are over 180 TB of data. Now what i dont understand, drivepool still can't detect the drives. I am able to open the files on the unlocked drives though,

do i have to wait until encryption process completed? what i dont understand is, isnt' it supposed to be decrypting instead of encrypting?

Share this post

Link to post
Share on other sites

2 answers to this question

Recommended Posts

  • 0

Sorry forgot to update, i managed to recover my data.

and yes, drivepool had to be restarted.

Painful (and expensive) lesson, but it taught me one thing, never ever create RDP shortcuts to your important servers :(

Share this post

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Create New...