Hey Norwalk! Used to live on Matilda Ave
Anyways, Symantec.... are you using the latest 12.1.6.RU6 MP5 build released like 2 weeks ago?
There is a 0-day flaw that affects basically all of the products because of the scan engine needs to be updated (not the virus definations).
https://www.neowin.net/news/symantec...zero-day-flaws
I'm upgrading all of our clients within the next few weeks to help prevent these kind of issues... about 25,000 workstations and 2500 servers.
.............
We had a similar issue however and this was a smaller remote site that still used tape backups so they were able to restore from about 8hrs overnight (lost some very little data but still could have been worse).
Other larger sites use storage snapshots so that is a bit faster and is not affected by the OS. So easy to mount a previous snapshot and boot up and off we go. Just delete the encrypted VM HDDs and off we go.