Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

*.hlutbte extension

Posted on 2015-02-04
5
Medium Priority
?
76 Views
Last Modified: 2015-02-11
hi you experts, all my word documents are becoming on Hlutbte extension?
what it is please!!!
regards
0
Comment
Question by:Ernesto
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 88

Assisted Solution

by:rindi
rindi earned 2000 total points
ID: 40589567
This looks like one of the ransomware viruses. Shut the PC down and disconnect it from the Internet. Then scan it with malwarebytes and remove the malware it finds Remember not to connect it to the internet at any time. Then, if you have good backups, delete those files and restore them from your backups. If you don't have any good backups, try right clicking the files, select Properties, and then the Previous Versions tab to restore an older version of the file that hasn't yet been encrypted.
0
 

Author Comment

by:Ernesto
ID: 40598661
how do i protect my server from ransomware, mcaffe is not protected it
regards
0
 
LVL 88

Assisted Solution

by:rindi
rindi earned 2000 total points
ID: 40598709
Malwarebytes as far as I know detects most ransomware, But of course as with any malware and virus, if it is a new version, it might not be detectable at it's outbreak.

The best thing is to backup, and rotate between different backup media. Also, remove the backup media from the server after the backup is done.

Connect to the server via UNC rather than mapped drive letters. Current ransomware versions can't attack UNC paths, but they can attack what is accessible as drive-letters.

Users must never logon to their PC's with admin accounts. Only standard accounts must be allowed. Also have UAC turned on for all OS's.

Educate the users, so that they are wary of unknown websites, and also that they are careful of email from unknown people, or that they don't open attachments without knowing what they are about. Education is the most important thing for deterring malware and viruses.
0
 

Author Comment

by:Ernesto
ID: 40598819
i ask for the malwarebytes crew about install in server, and they says is not supported, but i installed and works fine,
what to do in that cases?
0
 
LVL 88

Accepted Solution

by:
rindi earned 2000 total points
ID: 40598898
If it works, it works. But generally the server itself doesn't get infected, unless you work directly on it (which is bad practice except if it acts as a Terminal Server for your users). It is the PC's connected to the server that are the problem and should be protected. As I mentioned above the PC's with the Virus encrypt drive letters accessed by that PC.
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I don't pretend to be an expert at this, but I have found a few things that are useful. I hope that sharing them here will help others, so they will not have to face some rather hard choices. Since I felt this to be a topic of enough importance and…
IF you are either unfamiliar with rootkits, or want to know more about them, read on ....
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question