Endpoint Protection

 View Only
  • 1.  Microsoft office file extension change for all data

    Posted Mar 18, 2014 02:40 AM

    Hi,

     

     

    MY one windows 2003 server infected with virus it has changed my all ms office file extension.

     

     

     

    Thanks



  • 2.  RE: Microsoft office file extension change for all data

    Posted Mar 18, 2014 02:44 AM

    Collect the logs and submit for symantec responace team

     

    How to collect and submit to Symantec Security Response suspicious files found by the SymHelp utility

     

    Article:TECH203027 | Created: 2013-02-21 | Updated: 2013-05-23 | Article URL http://www.symantec.com/docs/TECH203027

    https://www-secure.symantec.com/connect/forums/some-virus-has-corrupted-many-our-microsoft-office-files-and-pdf-files



  • 3.  RE: Microsoft office file extension change for all data

    Posted Mar 18, 2014 02:55 AM

     changed extension file subbmited to symantec.



  • 4.  RE: Microsoft office file extension change for all data

    Posted Mar 18, 2014 02:56 AM

    file format change as a

    Audit report - 27.08.2013-29.08.2013?cod.scr

     



  • 5.  RE: Microsoft office file extension change for all data

    Posted Mar 18, 2014 03:01 AM

    Was checking this simillar thread and it seems like SEP already has the definition for it

    https://www-secure.symantec.com/connect/forums/some-virus-has-corrupted-many-our-microsoft-office-files-and-pdf-files

    Good that you submitted the files to symantec...

    whats the version of SEP you are using?

    Ran a full scan in safe mode?

    Have you tried malware bytes?



  • 6.  RE: Microsoft office file extension change for all data

    Posted Mar 18, 2014 03:02 AM

    ms office virus.PNG



  • 7.  RE: Microsoft office file extension change for all data

    Posted Mar 18, 2014 03:04 AM

    not tried malware bytes? it is safe to use on server

     

     

    sep version 12.1 RU3



  • 8.  RE: Microsoft office file extension change for all data

    Posted Mar 18, 2014 03:06 AM

    virus name Troja.Exprez.b



  • 9.  RE: Microsoft office file extension change for all data

    Posted Mar 18, 2014 03:09 AM

    Yeah, you can use that on your server, 

    if you enable show hidden files / folders you should see your actual files.



  • 10.  RE: Microsoft office file extension change for all data

    Posted Mar 18, 2014 05:57 AM

    Hi

    Please submit the files to the following link

    https://submit.symantec.com/websubmit/bcs.cgi

    Regards

     



  • 11.  RE: Microsoft office file extension change for all data

    Posted Mar 18, 2014 07:31 PM

    Have you run a full SEP scan with latest defs?

    Best Practices for Troubleshooting Viruses on a Network