Turned out NewPetya isn't ransomware, it wipes the data for good. Replaces MBR without backing up original one. If you see [email protected], don't bother paying.
https://thehackernews.com/2017/06/petya-ransomware-wiper-malware.html
https://blog.comae.io/petya-2017-is-a-wiper-not-a-ransomware-9ea1d8961d3b
Wrong, Windows has between 62 and 2048 free sectors following the MBR. The 24 *overwritten* are empty.
>>61129257
>not having backups
>ever paying
>bootrec /fixmbr
>>61129320
>>61129599
enjoy your encrypted MFT fags
>>61129257
kek
>>61129257
>MBR
Good thing we have UEFI, right?