Hi ​@LucaR, 

Welcome to Box Community, and thank you for raising this concern.

If you have not already, we recommend that you quit any active Box applications and scan your system for malware.

Ransomware can impact content in a number of ways including deleting, encrypting, or renaming files. If you have determined that content was deleted we can assist in recovering this data.

If your content was impacted in a way that resulted in the creation of new versions or the renaming of files, the Box Service does not collect the necessary data for Personal, Personal Pro, and Starter accounts that would enable us to assist in reverting your content. If you have a Personal Pro or Starter account you may use version history to manually restore the original versions of your files. Personal users may upgrade their account to receive access to version history.

Thanks for posting! 

Hi, thank you very much for your reply.

In my case the ransomware did not delete files, but only renamed/encrypted them by changing the extension. On the Box web portal I can see that all those files are now marked as “Version 2”, so I assume that the previous, uncorrupted versions should still be available.

I would like to ask for clarification:

• If I upgrade to a Personal Pro plan, will I be able to recover these previous healthy versions?
• Is there a way to restore entire folders (all files at once), or will I need to restore each file manually, one by one?

Thank you again for your support.