This is a usefully tool for going through all shadow copies and recovering data. The saved me one by recovering 100% of a users data that was encrypted by the cryptolocker virus.

Crypto Viruses will attempt to delete all shadow copies when you first start any executable on your computer after becoming infected. Thankfully, the infection is not always able to remove the shadow copies, so you should continue to try restoring your files using this method.

Works better if shadow copies are enabled.

How To Guide: