anyway m0nde apparently the new version of cryptolocker deletes your shadow copies so don't count on them and it also secure erases the original files after they're encrypted so anything you get back with a file carver is going to be a few days old. best bet is to blacklist eexcutables in AppData and /temp, insist on chrome/firefox with adblock plus, backup a lot and hope for the best