Office Documents Corrupted

Overnight all the Office files on a file server have become corrupted.  It seems that other files have not been affected.  When you try to open a file the error is 'The file you are trying to open is in a different format that specified by the file extension. Verify that the file is not corrupt and is from a trusted source.....'
There is no disk corruption (neither the Operating System or the Dell server manager, it is a Dell server, are reporting any problems.  The oddity is that these files are replicated to a remote site but the remote files do not appear, at this stage, to have been affected?  Additionally, the replication is done based on changed files and yet we are not seeing the continuous replication you would expect.  
Any suggestions welcome please?
micanlimitedAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

unknown_routineCommented:
'The file you are trying to open is in a different format that specified by the file extension. Verify that the file is not corrupt and is from a trusted source.....'

Is just a compatiblity warninng. What happens if you open a document abd click on yes after this warninig?


Try this:

Open a document(choose yes After warning) , if document opens (it could open as empty) choose font as Timew New roman
0
micanlimitedAuthor Commented:
Have tried opening the file by clicking on the file and opening Excel / Word and then opening the file.  Both ways, the file is completely garbled and makes no sense and prompts for the encoding(?).
0
BlueComputeCommented:
It's possible the files have been corrupted by a virus - are old versions from Shadow Copy still good, and what does VirusTotal have to say about a sample of your files?
If you open one of the files in a hex editor, and copy the first few hex pairs, you can then search here and find out what format the files are actually in, which might give some clue as to what's happened to them.
Are your symptoms anything like those found here?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

BlueComputeCommented:
Also, any chance you could upload a file demonstrating this issue somewhere so me and other experts can have a look?
0
micanlimitedAuthor Commented:
Over the weekend it was identified as ransomware (scary!) when a pop-up appeared demanding money to unencrypt the files.  In collaboration with the anti virus authors the threat has now been cleaned.  We resolved this ourselves.
0
BlueComputeCommented:
Glad you got it sorted - sounds nerve-racking.  Can you clarify whether you were able to decrypt the affected files with the assistance of your AV vendor?  And did you ID the source of the infection?
0
BlueComputeCommented:
Hi micanlimited,
No comment from you for a week or so now, and the answer I provided ("It's possible the files have been corrupted by a virus") is clearly the correct one, so I'm going to request that this question is closed with the points assigned to comment ID: 39476453.
Cheers,

BC
0
micanlimitedAuthor Commented:
It was not possible to de-crypt the files and the client had to resort to backup.
0
micanlimitedAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for micanlimited's comment #a39480066

for the following reason:

We resolved this ourselves.
0
BlueComputeCommented:
As per http://www.experts-exchange.com/Software/Office_Productivity/Office_Suites/MS_Office/Q_28232531.html#a39502285, the answer provided was correct - it's unfortunate that the op wasn't able to decrypt their client's files but that's not directly related to the accuracy of the explanation provided.
0
micanlimitedAuthor Commented:
My apologies, I had missed the post.  The Expert was indeed right with his suggestion.
0
BlueComputeCommented:
Cheers Mican, and sorry you got bitten by this one too, horrible client situation to have to deal with. Thanks for correcting and assigning the points.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Office

From novice to tech pro — start learning today.