Computer virus corrupted all document files

[Boomer]

7. It's not looking good

I tried the Shadow Explorer, but as noted by most CryptoWall info it appears to have deleted Shadow restore points and encrypted the backup files on my external drive (it follows all mapped drives). The only way to have prevented that was to detach the external drive after each backup (and that never occurred to me as something necessary for security).

My method of last resort is Delete Recovery software. Apparently CryptoWall makes copies during the encryption and deletes the original file. So I'm trying to recover the deleted copies, just to cover all bases. At this point, we can reconstruct enough of the documents to get by; it's the email that is most valuable and that, unfortunately, is the most difficult to recover.