In most of the cases, Ransomware erases all the shadow copies that are stored on the compromised PC. However, if the Shadow copy has not been deleted by ransomware attack, users can restore it by Downloading ShadowExplorer.
Step 1:Click to Download ShadowExplorer and execute it.
Step 2: You must accept the agreement to be able to continue.
Once ShadowExplorer is successfully installed, C: drive is to be selected on the left panel.
4. Date period of month ago is to be selected in the Date Field.
5. Now Navigate and select to the folder having encrypted files.
6. Now Choose and click on “Export” option to restore the files on desired location of PC.