Check server and noted server file shares infected with ransomware (.happy22 extensions). Disconnect server from network and proceed to scan all workstations at St. Lucy's. 1 workstation infected with 55 malware (Dr. D's workstation). All other workstations clean. Marie advised that a USB drive was connected over the weekend. Brought Server and Dr. D's workstation back to DSI. Attempt to restore server from backup image but backup images is corrupted. Proceed to run a full data recovery scan on backup external HDDs to recover data. Initial data recovery scan only found files infected with .happy22 file extension. Proceed to run a full, long data recovery scan which will take some time to complete. DSI to check on results once completed.
|
Work Completed |
Technician |
Check-in |
Check-out |
Actual Hrs |
| 1 |
Check server and noted server file shares infected with ransomware (.happy22 extensions). Disconnect server from network and proceed to scan all workstations at St. Lucy's. 1 workstation infected with 55 malware (Dr. D's workstation). All other workstations clean. Marie advised that a USB drive was connected over the weekend. Brought Server and Dr. D's workstation back to DSI. Attempt to restore server from backup image but backup images is corrupted. Proceed to run a full data recovery scan on backup external HDDs to recover data. |
Kevin Hsueh
|
01/26/2026 01:30 pm |
01/26/2026 05:30 pm |
04:00
|
| 2 |
Initial data recovery scan only found files infected with .happy22 file extension. Proceed to run a full, long data recovery scan which will take some time to complete. DSI to check on results once completed. |
Kevin Hsueh
|
01/27/2026 02:00 pm |
01/27/2026 03:00 pm |
01:00
|
