Solved

Currpted Files Due to Virus

Posted on 2014-01-16
8
479 Views
Last Modified: 2014-01-18
Corrupted Document Screenshot 1Corrupted Document Screenshot 2
I have an user whose PC was infected with "Crypto" virus on this computer last night and somehow so many WORD/EXECL files on the network drive (on Windows Server 2003/File Server) have been infected. When I try to open them, I see the screenshots.

Is there a simply program that will undo the damage?
0
Comment
Question by:sglee
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 4

Accepted Solution

by:
Kent Fichtner earned 167 total points
ID: 39786183
I am sorry to say but as far as I am aware those files are encrypted, not corrupted.  I have looked and there are a lot of other people with the same issue.  The only solution that I know of is to restore a backup.
0
 
LVL 79

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 167 total points
ID: 39786287
Pay the ransom, restore from shadow copies, restore from backup are the only solutions. I am very sorry to say.
0
 
LVL 84

Assisted Solution

by:Scott McDaniel (Microsoft Access MVP - EE MVE )
Scott McDaniel (Microsoft Access MVP - EE MVE ) earned 166 total points
ID: 39786299
0
U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

 

Author Comment

by:sglee
ID: 39786419
Excel ErrorUpon further investigation, I don't think it is an act of virus.
Reasons:
(1) I can open some WORD files.
(2) I can't open any of the EXCEL files so far. I tried to open 20 some excel files.
(3) All of those files that I can't open have older dates like 9/5/2011, 5/3/1009 ... etc. None of these have today's or yesterday's dates. If the virus opened/altered the contents of those files, they would have had recent dates, but that is not the case.

That leads me to think that maybe this problem is caused by something else. Maybe server hardware is failing? Windows updates (perhaps applied overnight) screwed things up? If the Windows update was the problem, that would have been on CNN by now.

I don't know what to make of it?

As to the backup, I found out they did not have good backup since 12/168/2013, so here is another problem.
0
 
LVL 84
ID: 39786462
Crypto may not have encrypted all of the documents, so it would be possible open some but not all. It's very obvious if Crypto was the culprit - the user should have seen the "ransom" screen on their machine at some point. It's an image that has "Your personal files are encrypted" at the top, a picture of a shield to the left, a countdown timer, etc etc.

If you know the machine was infected with Crypto. then AFAIK there's nothing you can do other than pay the ransom, restore from backup, or try to use the Shadow Copy workaround to get them back (as suggested earlier).
0
 

Author Comment

by:sglee
ID: 39786503
Viruses QuarantinedHere are the viruses in Quarantined.
0
 
LVL 4

Expert Comment

by:Kent Fichtner
ID: 39786598
I would say if it is that virus or not, if the files have been corrupted that means the data in the file has changed...then the only way to get it back is to restore it.  Either restore through system rollback or a restore though a backup.
0
 

Author Comment

by:sglee
ID: 39786617
I agree. Thanks for your help.
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A little background as to how I came to I design this code: Around 5 years ago I designed an add-in that formatted Excel files to a corporate standard, applying different cell colours and font type depending on whether the cells contained inputs,…
A simple tool to export all objects of two Access files as text and compare it with Meld, a free diff tool.
This Micro Tutorial demonstrates using Microsoft Excel pivot tables, how to reverse engineer competitors' marketing strategies through backlinks.
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question