*.hlutbte extension

Posted on 2015-02-04
Last Modified: 2015-02-11
hi you experts, all my word documents are becoming on Hlutbte extension?
what it is please!!!
Question by:edo60
  • 3
  • 2
LVL 88

Assisted Solution

rindi earned 500 total points
ID: 40589567
This looks like one of the ransomware viruses. Shut the PC down and disconnect it from the Internet. Then scan it with malwarebytes and remove the malware it finds Remember not to connect it to the internet at any time. Then, if you have good backups, delete those files and restore them from your backups. If you don't have any good backups, try right clicking the files, select Properties, and then the Previous Versions tab to restore an older version of the file that hasn't yet been encrypted.

Author Comment

ID: 40598661
how do i protect my server from ransomware, mcaffe is not protected it
LVL 88

Assisted Solution

rindi earned 500 total points
ID: 40598709
Malwarebytes as far as I know detects most ransomware, But of course as with any malware and virus, if it is a new version, it might not be detectable at it's outbreak.

The best thing is to backup, and rotate between different backup media. Also, remove the backup media from the server after the backup is done.

Connect to the server via UNC rather than mapped drive letters. Current ransomware versions can't attack UNC paths, but they can attack what is accessible as drive-letters.

Users must never logon to their PC's with admin accounts. Only standard accounts must be allowed. Also have UAC turned on for all OS's.

Educate the users, so that they are wary of unknown websites, and also that they are careful of email from unknown people, or that they don't open attachments without knowing what they are about. Education is the most important thing for deterring malware and viruses.

Author Comment

ID: 40598819
i ask for the malwarebytes crew about install in server, and they says is not supported, but i installed and works fine,
what to do in that cases?
LVL 88

Accepted Solution

rindi earned 500 total points
ID: 40598898
If it works, it works. But generally the server itself doesn't get infected, unless you work directly on it (which is bad practice except if it acts as a Terminal Server for your users). It is the PC's connected to the server that are the problem and should be protected. As I mentioned above the PC's with the Virus encrypt drive letters accessed by that PC.

Featured Post

Give your grad a cloud of their own!

With up to 8TB of storage, give your favorite graduate their own personal cloud to centralize all their photos, videos and music in one safe place. They can save, sync and share all their stuff, and automatic photo backup helps free up space on their smartphone and tablet.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Ways to verify USB ports are blocked on 30,000 PCs/laptops 12 112
IT Contract Fee 17 127
SQL BACKUP - 2008 R2 8 59
yahoo Hacks 9 92
It’s a strangely common occurrence that when you send someone their login details for a system, they can’t get in. This article will help you understand why it happens, and what you can do about it.
Find out what Office 365 Transport Rules are, how they work and their limitations managing Office 365 signatures.
Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now