Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 79
  • Last Modified:

*.hlutbte extension

hi you experts, all my word documents are becoming on Hlutbte extension?
what it is please!!!
regards
0
Ernesto
Asked:
Ernesto
  • 3
  • 2
3 Solutions
 
rindiCommented:
This looks like one of the ransomware viruses. Shut the PC down and disconnect it from the Internet. Then scan it with malwarebytes and remove the malware it finds Remember not to connect it to the internet at any time. Then, if you have good backups, delete those files and restore them from your backups. If you don't have any good backups, try right clicking the files, select Properties, and then the Previous Versions tab to restore an older version of the file that hasn't yet been encrypted.
0
 
ErnestoAuthor Commented:
how do i protect my server from ransomware, mcaffe is not protected it
regards
0
 
rindiCommented:
Malwarebytes as far as I know detects most ransomware, But of course as with any malware and virus, if it is a new version, it might not be detectable at it's outbreak.

The best thing is to backup, and rotate between different backup media. Also, remove the backup media from the server after the backup is done.

Connect to the server via UNC rather than mapped drive letters. Current ransomware versions can't attack UNC paths, but they can attack what is accessible as drive-letters.

Users must never logon to their PC's with admin accounts. Only standard accounts must be allowed. Also have UAC turned on for all OS's.

Educate the users, so that they are wary of unknown websites, and also that they are careful of email from unknown people, or that they don't open attachments without knowing what they are about. Education is the most important thing for deterring malware and viruses.
0
 
ErnestoAuthor Commented:
i ask for the malwarebytes crew about install in server, and they says is not supported, but i installed and works fine,
what to do in that cases?
0
 
rindiCommented:
If it works, it works. But generally the server itself doesn't get infected, unless you work directly on it (which is bad practice except if it acts as a Terminal Server for your users). It is the PC's connected to the server that are the problem and should be protected. As I mentioned above the PC's with the Virus encrypt drive letters accessed by that PC.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now