Unable to open files in shared folders
Dears,
We are facing a strange behavior on our file server. Suddenly some users were unable to open any file from the shared folders. Below are the errors they got when trying to open doc, xls, ppt and pdf files:
Opening PDF files:
Acrobat could not open file.pdf because it is either not a supported file type or because the file has been damaged (for example it was sent as an email attachment and wasn't correctly decoded). To create an Adobe PDF document, go to the source application then print the document to adobe pdf
opening word files: the file is corrupted and cannot be opened. Microsoft office cannot open this file because some parts are missing or invalid
opening excel: The file you are trying t open 'file.xls', is in a different format than specified by the file extension. Verify the file is not cirrupted and is from a trusted source before opening the file.
opening power point:
This error can be caused by the following conditions:
-Your hard drive or floppy drive has a corrupt section (damaged track or sector).
-A temporary operating system or network failure has occurred.
-Your network is unavailable, slow, or is corrupting data packets (failure of a router, network card, or noise on the network transmission line).
-Your antivirus program may be causing problems accessing certain files.
In the case of a damaged disk, you must save the file to another location (for example, a different drive).
In the case of a failure of the operating system, this can be caused by various memory management problems, viruses, incorrect usage of a UNC, alias, or invalid permissions to the share where the file is stored.
If the network is experiencing problems, it is usually a temporary condition and if you wait a short period of time and try again, you can usually save the file. If the problem persists, consult your network administrator.
A known condition with an antivirus program can cause a similar condition. Check with the manufacturer of your antivirus program to see if an update exists.
On another front, we are able to open the files from the backup copy that was created on another server in the same network.
We are scanning the main server now for viruses using different tools. Kaspersky didn't find any virus so far!!!
Appreciate your help!!
We are facing a strange behavior on our file server. Suddenly some users were unable to open any file from the shared folders. Below are the errors they got when trying to open doc, xls, ppt and pdf files:
Opening PDF files:
Acrobat could not open file.pdf because it is either not a supported file type or because the file has been damaged (for example it was sent as an email attachment and wasn't correctly decoded). To create an Adobe PDF document, go to the source application then print the document to adobe pdf
opening word files: the file is corrupted and cannot be opened. Microsoft office cannot open this file because some parts are missing or invalid
opening excel: The file you are trying t open 'file.xls', is in a different format than specified by the file extension. Verify the file is not cirrupted and is from a trusted source before opening the file.
opening power point:
This error can be caused by the following conditions:
-Your hard drive or floppy drive has a corrupt section (damaged track or sector).
-A temporary operating system or network failure has occurred.
-Your network is unavailable, slow, or is corrupting data packets (failure of a router, network card, or noise on the network transmission line).
-Your antivirus program may be causing problems accessing certain files.
In the case of a damaged disk, you must save the file to another location (for example, a different drive).
In the case of a failure of the operating system, this can be caused by various memory management problems, viruses, incorrect usage of a UNC, alias, or invalid permissions to the share where the file is stored.
If the network is experiencing problems, it is usually a temporary condition and if you wait a short period of time and try again, you can usually save the file. If the problem persists, consult your network administrator.
A known condition with an antivirus program can cause a similar condition. Check with the manufacturer of your antivirus program to see if an update exists.
On another front, we are able to open the files from the backup copy that was created on another server in the same network.
We are scanning the main server now for viruses using different tools. Kaspersky didn't find any virus so far!!!
Appreciate your help!!
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Exactly!!!I found that virus on a machine!!!! Any idea on how to remove it? Also, would it be possible to gain access to the shared folder again?
Crypto locker is not an easy one. I have not tried the solutions on these pages, but they look promising:
http://www.precisesecurity.com/rogue/cryptolocker-ransomware
http://botcrawl.com/how-to-remove-the-cryptolocker-virus/
Before you do anything make sure you have a full backup.
http://www.precisesecurity.com/rogue/cryptolocker-ransomware
http://botcrawl.com/how-to-remove-the-cryptolocker-virus/
Before you do anything make sure you have a full backup.
Malware bytes should be able to remove the virus. What server is the shared folder on? Depending on the os you should be able to right click on that shared folder and go to the previous versions tab and restore the folder from there. You will have to delete existing content being that they are encrypted.
You may also have to manually clear the user accounts temp folder and manually change the desktop wallpaper.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
It searches your computer and mapped drives and encrypts all msoffice PDF and photo files.
@ITguy850 I successfully opened several files of image types JPG, BMP, and PNG on a file share infected by this malware. Perhaps the one my team identified is a variant of the one most folks are reporting.
ASKER
Full details to remove the virus
ASKER
We have 5 shared folders containing data on the same volume. Files in 2 of them only are not accessible. Files in the other 3 shared drives can be accessed normally.
Thanks -