Endpoint Protection Small Business Edition

 View Only
Expand all | Collapse all

i cant open office file...file extension has been changed!!!!!

Migration User

Migration UserApr 18, 2015 02:19 AM

Migration User

Migration UserApr 18, 2015 02:47 AM

  • 1.  i cant open office file...file extension has been changed!!!!!

    Posted Apr 18, 2015 02:11 AM

    i cant open my office file( doc,exel etc)...when i try to open it, file extension has been changed automatically.

    all my important file has been corrupted. i give you the sample of some file.

    please give me appropriate solution.



  • 2.  RE: i cant open office file...file extension has been changed!!!!!

    Posted Apr 18, 2015 02:19 AM
      |   view attached

    i gave you the corrupted file sample

    Attachment(s)



  • 3.  RE: i cant open office file...file extension has been changed!!!!!

    Posted Apr 18, 2015 02:41 AM
    This is cryptolocker. If You have old backup you can restore backup.otherwise you have lost are files.


  • 4.  RE: i cant open office file...file extension has been changed!!!!!

    Posted Apr 18, 2015 02:46 AM

    what specific reason to corrupt such doc. file even though symantec protection is on?????

    i want clear solution



  • 5.  RE: i cant open office file...file extension has been changed!!!!!

    Posted Apr 18, 2015 02:47 AM

    can symantec protect me from cryptolocker????



  • 6.  RE: i cant open office file...file extension has been changed!!!!!

    Posted Apr 18, 2015 02:49 AM
    You can submit suspect file symantec support See mick2009 articles Symantec Insider Tip: Successful Submissions! https://www-secure.symantec.com/connect/articles/symantec-insider-tip-successful-submissions


  • 7.  RE: i cant open office file...file extension has been changed!!!!!

    Posted Apr 18, 2015 03:03 AM
    May be this is new versions of ransomwar,you need to submit file symantec support


  • 8.  RE: i cant open office file...file extension has been changed!!!!!

    Posted Apr 18, 2015 03:15 AM

    from last 1 weak i have submitted 3 cases to symantec but they didnt reply anything....

    i m just shocked with that type of support 



  • 9.  RE: i cant open office file...file extension has been changed!!!!!

    Posted Apr 18, 2015 07:48 AM
    Did you submit a sample to them? What version of SEP are you running? Do you have the IPS, firewall, SONAR, and download insight enabled?


  • 10.  RE: i cant open office file...file extension has been changed!!!!!

    Posted Apr 18, 2015 08:06 AM

    Yes, but what components do you have enabled? The full suite? not just AV?



  • 11.  RE: i cant open office file...file extension has been changed!!!!!

    Posted Apr 18, 2015 08:10 AM

    This report shows SEP is not even installed?? What's going on is it installed or not?



  • 12.  RE: i cant open office file...file extension has been changed!!!!!

    Posted Apr 20, 2015 02:25 AM

    This could be problem with file association. Can give a try by running the exe association fix.



  • 13.  RE: i cant open office file...file extension has been changed!!!!!

    Posted Apr 20, 2015 06:10 AM

    i have submitted my corrupted file and symmantec replied me, they couldnt give appropriate solution to get ride of it. i m in critical condition since last 1 month.all my files(doc,excel) were corrupted by cryptolocker.

    but SEP 12.1.5 cant protect me from such viruses. if u can give me update solution i will be glad.

    BRIAN



  • 14.  RE: i cant open office file...file extension has been changed!!!!!

    Posted Apr 20, 2015 08:05 AM

    Is SEP even installed? The file you attached shows it is not. Again, what components are you running? I hope in addition to AV, IPS, firewall, SONAR,and download insight?



  • 15.  RE: i cant open office file...file extension has been changed!!!!!

    Posted Apr 20, 2015 08:06 AM

    Hi asif00777,

    The diagnostic you attached shows that there was no Symantec product installed on the computer.  Please install a security suite with AV, IPS and all other components to prevent future infections!

    If you have a case number, feel free to PM it to me. I will have a quick look.

    It sounds like you have been hit by a cryptolocker. Here are a few articles that may help:

     

    Recovering Ransomlocked Files Using Built-In Windows Tools

    https://www-secure.symantec.com/connect/articles/recovering-ransomlocked-files-using-built-windows-tools

     

    Ransomcrypt: A Thriving Menace (aka Cryptolocker: A Thriving Menace)

    https://www-secure.symantec.com/connect/blogs/ransomcrypt-thriving-menace    

     

    Cryptolocker Q&A: Menace of the Year

    https://www-secure.symantec.com/connect/blogs/cryptolocker-qa-menace-year    

     

    First Response to: Cryptolocker \ Ransomcrypt\ Encryptor

    https://www-secure.symantec.com/connect/articles/first-response-cryptolocker-ransomcrypt-encryptor

     

    The Day After: Necessary Steps after a Virus Outbreak

    https://www-secure.symantec.com/connect/articles/day-after-necessary-steps-after-virus-outbreak

     

    Support Perspective: CTB-Locker and other forms of Crypto malware
    https://www-secure.symantec.com/connect/blogs/support-perspective-ctb-locker-and-other-forms-crypto-malware

     

    With thanks and best regards,

    Mick