Solved

*.hlutbte extension

Posted on 2015-02-04
5
68 Views
Last Modified: 2015-02-11
hi you experts, all my word documents are becoming on Hlutbte extension?
what it is please!!!
regards
0
Comment
Question by:edo60
  • 3
  • 2
5 Comments
 
LVL 87

Assisted Solution

by:rindi
rindi earned 500 total points
ID: 40589567
This looks like one of the ransomware viruses. Shut the PC down and disconnect it from the Internet. Then scan it with malwarebytes and remove the malware it finds Remember not to connect it to the internet at any time. Then, if you have good backups, delete those files and restore them from your backups. If you don't have any good backups, try right clicking the files, select Properties, and then the Previous Versions tab to restore an older version of the file that hasn't yet been encrypted.
0
 

Author Comment

by:edo60
ID: 40598661
how do i protect my server from ransomware, mcaffe is not protected it
regards
0
 
LVL 87

Assisted Solution

by:rindi
rindi earned 500 total points
ID: 40598709
Malwarebytes as far as I know detects most ransomware, But of course as with any malware and virus, if it is a new version, it might not be detectable at it's outbreak.

The best thing is to backup, and rotate between different backup media. Also, remove the backup media from the server after the backup is done.

Connect to the server via UNC rather than mapped drive letters. Current ransomware versions can't attack UNC paths, but they can attack what is accessible as drive-letters.

Users must never logon to their PC's with admin accounts. Only standard accounts must be allowed. Also have UAC turned on for all OS's.

Educate the users, so that they are wary of unknown websites, and also that they are careful of email from unknown people, or that they don't open attachments without knowing what they are about. Education is the most important thing for deterring malware and viruses.
0
 

Author Comment

by:edo60
ID: 40598819
i ask for the malwarebytes crew about install in server, and they says is not supported, but i installed and works fine,
what to do in that cases?
0
 
LVL 87

Accepted Solution

by:
rindi earned 500 total points
ID: 40598898
If it works, it works. But generally the server itself doesn't get infected, unless you work directly on it (which is bad practice except if it acts as a Terminal Server for your users). It is the PC's connected to the server that are the problem and should be protected. As I mentioned above the PC's with the Virus encrypt drive letters accessed by that PC.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Phishing is at the top of most security top 10 efforts you should be pursuing in 2016 and beyond. If you don't have phishing incorporated into your Security Awareness Program yet, now is the time. Phishers, and the scams they use, are only going to …
Nothing in an HTTP request can be trusted, including HTTP headers and form data.  A form token is a tool that can be used to guard against request forgeries (CSRF).  This article shows an improved approach to form tokens, making it more difficult to…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now