Also it seems the virus disabled/deleted all VSS copies on the machine which leaves shadow copy replace out of the window. Seems the virus only removes the first 512, or 1024 bytes of data from the jpeg, encrypts it, then pops it onto the end of the file, so in theory i should be able to recover a fair amount of the pictures by replacing them with a working header. It seems like it IS able to recover the files, but then deletes the good copy of it, i wouldn't doubt it as the program itself was written quite haphazardly with no error handling what-so-ever, and i'm wondering if anyone has any experience with this virus, or JPEG recovery in total? I've done substantial research and found a lovely utility called 'anti-cryptorbitV2' that will recover about 50% of the files, but it will either delete, or simply just say the file was too corrupt to repair on the other 50% of the files. Get the software to perform JPG recovery right now.

Fortunately, with the photo recovery software - EaseUS Data Recovery Wizard, you can not only recover the JPG/JPEG/PNG files and but also repair the corrupted JPG/JPEG files during the recovery. I've got a client who was intelligent enough to keep every one of the pictures of her son who is now 3 on a single laptop that was recently infected with CryptorBit virus (howdecrypt). Your JPG file may get deleted, formatted, or lost due to many possible reasons.

Jpeg recovery