Sukesh Shukla
asked on
Windows server 2008
Every 15 20 days all my files get encryted word excel pdf gets encrpted. I checked with eset antivirus team they say it is not virus. Cyberoam firewall also denies it is not hacking. I have RDS working . How do i recover the encrypted file and ensure it doesnot re appears again.
Please advise.
Please advise.
Last Comment
ASKER
Sir any tips to ensure that my system is safe from such viruses. Also is there any antivirus that scans or identify such threats. Please advise some good anti malaware too
Cryptowall has been out for a while, so any good commercial up-to-date antivirus should be able to protect against it. My clients all use Symantec Endpoint Protection.
Are you seeing anything like this:
http://www.precisesecurity.com/rogue/cryptolocker-ransomware?
I agree with John, it sounds a lot like Cryptowall, a variant of Cryptolocker. Your best bet is a clean reinstall (baremetal) from backup - rebuilding the server. Make sure your baremetal backup is prior to any of these problems. If you need the files that have been encrypted, you will need to carefully restore them after you have rebuilt the server, preferably in a vm.
http://www.precisesecurity.com/rogue/cryptolocker-ransomware?
I agree with John, it sounds a lot like Cryptowall, a variant of Cryptolocker. Your best bet is a clean reinstall (baremetal) from backup - rebuilding the server. Make sure your baremetal backup is prior to any of these problems. If you need the files that have been encrypted, you will need to carefully restore them after you have rebuilt the server, preferably in a vm.
Have you tried also using chameleon from MalwareBytes? Download and run the svchost file in the chameleon directory.
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Windows Server 2008
Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.
86K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
That would be the Cryptowall virus. Make sure you have a good regular backup of good files and then scan thoroughly for malware. When done, scan with Malwarebytes (malwarebytes.org)