Excel Errors on Network Drives

A couple hours ago we starting noticing a lot of errors with Excel and Word documents that are stored on the network.
When we try to open them we get the attached error. We are using Office 2010 and nothing has changed on the file server or with the computers. Some are saves as xlsx and some as xls and they both have issues.

Is there something I can do to fix this?

Error
LVL 3
WinsoupAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Josh-ITCommented:
Really a longshot, but-
Are you having the same problem with any other of the following file types?
3fr, accdb, ai, arw, bay, cdr, cer, cr2, crt, crw, dbf, dcr, der, dng, doc, docm, docx, dwg, dxf, dxg, eps, erf, indd, jpe, jpg, kdc, mdb, mdf, mef, mrw, nef, nrw, odb, odm, odp, ods, odt, orf, p12, p7b, p7c, pdd, pef, pem, pfx, ppt, pptm, pptx, psd, pst, ptx, r3d, raf, raw, rtf, rw2, rwl, srf, srw, wb2, wpd, wps, xlk, xls, xlsb, xlsm, xlsx

I can't remember if Cryptolocker changes file extensions or not, but it's nasty if that's what is causing this. Typically I have seen this ransomware get's onto a single client PC, and then it starts encrypting all the above file types across any network shares.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
thecodecageCommented:
Have you tried opening the document with repair? take a read through this to see if it helps http://office.microsoft.com/en-gb/excel-help/repairing-a-corrupted-workbook-HA010342840.aspx

Regards,
Simon
0
WinsoupAuthor Commented:
I actually just had a user call and had that virus so chances are thats what happened.
Is there a good way to go about fixing this?

We are using Kaspersky but apparently it made it past that.
0
Cloud Class® Course: Microsoft Exchange Server

The MCTS: Microsoft Exchange Server 2010 certification validates your skills in supporting the maintenance and administration of the Exchange servers in an enterprise environment. Learn everything you need to know with this course.

Josh-ITCommented:
Depends on the variant of the virus from what I hear.
So, from last I read into Cryptolocker, it's easy to remove. The bad news is that won't help you get the files back.
Restore from Backup is the best method to get your files back typically once the virus is gone.
I have seen someone pay the ransom the malware is demanding and let the machine start decrypting files, the client I was helping paid the ransom, and the software did start decrypting their files. As much as I hate to suggest it, that worked for them.
It is a super nasty one though that last I checked there was no way to decrypt the files without getting the private key from the people demanding the ransom.

http://blog.malwarebytes.org/intelligence/2013/10/cryptolocker-ransomware-what-you-need-to-know/
0
WinsoupAuthor Commented:
This doesn't sound like much fun.
If it installed on a single computer and found its way to a couple network drives do I need to wipe the file server too or just get her machine off the network since the actual virus was only on her machine?
I can restore from backups if I have to do that.
0
Josh-ITCommented:
Sorry, about to run out for the day so I won't be of much more assistance.
To my knowledge, if you kill the actual ransomware, you won't be able to decrypt the files via paying the ransom.
My understanding is that the ransomware only loads on the infected machine, then encrypts what it has access too, including network shares. So I don't believe the file server actually gets infected.
And yes, from what I heard it is no fun. And nothing stops it yet that I know of.
0
WinsoupAuthor Commented:
Ok, now that we know what the issue is we'll figure out how we want to handle it.
Thanks for your input.
0
Josh-ITCommented:
No problem, good luck. It's a nasty one that's all too easy to get unfortunately.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Excel

From novice to tech pro — start learning today.