What if it is a Time Bomb crypto. The file could have been sitting there for 6 months. Its possible to restore the crypto package. What precautions are take NOT to do this?
What if the Crypto plants another Time Bomb on the Server that does not appear for another 6 months?
I understand this is to get the data back. It does not fend against full rebuilds on any of the system. The integrity has been breached, does anyone want to take the chance is not sitting dormant?
Its just a never ending risk.