Solved

*.hlutbte extension

Posted on 2015-02-04
5
71 Views
Last Modified: 2015-02-11
hi you experts, all my word documents are becoming on Hlutbte extension?
what it is please!!!
regards
0
Comment
Question by:edo60
  • 3
  • 2
5 Comments
 
LVL 88

Assisted Solution

by:rindi
rindi earned 500 total points
ID: 40589567
This looks like one of the ransomware viruses. Shut the PC down and disconnect it from the Internet. Then scan it with malwarebytes and remove the malware it finds Remember not to connect it to the internet at any time. Then, if you have good backups, delete those files and restore them from your backups. If you don't have any good backups, try right clicking the files, select Properties, and then the Previous Versions tab to restore an older version of the file that hasn't yet been encrypted.
0
 

Author Comment

by:edo60
ID: 40598661
how do i protect my server from ransomware, mcaffe is not protected it
regards
0
 
LVL 88

Assisted Solution

by:rindi
rindi earned 500 total points
ID: 40598709
Malwarebytes as far as I know detects most ransomware, But of course as with any malware and virus, if it is a new version, it might not be detectable at it's outbreak.

The best thing is to backup, and rotate between different backup media. Also, remove the backup media from the server after the backup is done.

Connect to the server via UNC rather than mapped drive letters. Current ransomware versions can't attack UNC paths, but they can attack what is accessible as drive-letters.

Users must never logon to their PC's with admin accounts. Only standard accounts must be allowed. Also have UAC turned on for all OS's.

Educate the users, so that they are wary of unknown websites, and also that they are careful of email from unknown people, or that they don't open attachments without knowing what they are about. Education is the most important thing for deterring malware and viruses.
0
 

Author Comment

by:edo60
ID: 40598819
i ask for the malwarebytes crew about install in server, and they says is not supported, but i installed and works fine,
what to do in that cases?
0
 
LVL 88

Accepted Solution

by:
rindi earned 500 total points
ID: 40598898
If it works, it works. But generally the server itself doesn't get infected, unless you work directly on it (which is bad practice except if it acts as a Terminal Server for your users). It is the PC's connected to the server that are the problem and should be protected. As I mentioned above the PC's with the Virus encrypt drive letters accessed by that PC.
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

An analysis of the phishing scam that has been affecting Google users, along with steps to take for protection, as well as what to do if you receive one of the emails.
How do we balance the user experience (UX) with reasonable security measures? It can be done, if you keep these fundamentals in mind.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now