We guess it was another one of the ransomwares but they had nothing to lose and a reload cured it.
What they asked was "Why didn't my antivirus stop it?"
Answer: "It's not a virus."
Just had a client where all of his desktop icons were converted to shortcuts and all of the files deleted. They could not be recovered even with a deep recovery tool. Has anyone seen this - and is there anything we can do to recover the data?