Encrypted USB?

[Jayden_Blade]

A friend of mine accessed a webpage that "Military grade encrypted" his system. He was able to dump his important files to a flashdrive and he wiped the computer and reinstalled Windows 7. When accessing the usb via kali or windows 7 all the files are "corrupted". or encrypted. Any ideas?

[staticn0de]

If I read it write, the computer was infected with something that encrypted the os.

I'd say it was complex enough to take out the thumb drive at the same time. It will likely not be economical to recover any data on the thumb drive.

[Jayden_Blade]

So its a lost cause? From what I was told the files were moved after the virus went nuts.

[staticn0de]

Was it crypto locker?

[Jayden_Blade]

I have no idea.

[lillypad]

Depending on the file type you can look at the headers with a generic hex editor and attempt to repair it manually.
The best way to do that is to use fstream and c++ takes a bit of file i/o knowledge but it is possble to recover some data within a file sometimes.
I did this for wav files back a year or two ago.
If the file is encrypted you could try writing your own program to decrypt it as well depending on what encoding it is mind you if the files are worth that much trouble.
-lillypad

[Jayden_Blade]

The owner got fed up and said screw it. Reformated and returned. Thanks anyway guys!