Endpoint Protection

 View Only
  • 1.  NBMLQON

    Posted Jan 21, 2015 09:41 AM
    All my file (Word, Excel,PDF, PPT, Etc) corrupt with some virus. Now all file have extension NBMLQON for examle previous file name abc.doc now file name change to abc.doc.nbmlqon. Please do the needful thank in adavnce.


  • 2.  RE: NBMLQON

    Posted Jan 21, 2015 09:44 AM

    You have a form of cryptolocker it sounds like. Do you have a backup? If not, your files are likely lost.

    See these:

    http://www.symantec.com/business/support/index?pag...

    https://www-secure.symantec.com/connect/blogs/rans...

    https://www-secure.symantec.com/connect/forums/new..

    Are you running IPS/firewall/SONAR/Download Insight in addition to AV?



  • 3.  RE: NBMLQON

    Posted Jan 22, 2015 12:24 AM

    Virus found in computer was CTB-Locker. virus is clean but file not open..



  • 4.  RE: NBMLQON

    Posted Jan 22, 2015 02:28 AM

    Hi Sujitbsnl,

    This article has the details on what you're describing:

    New article: CTB-Locker and other forms of Crypto malware
    https://www-secure.symantec.com/connect/forums/new-article-ctb-locker-and-other-forms-crypto-malware

    Try to locate the "fax" attachment which caused the damage and submit it to Security Response, if it was not already detected by later definitions.

    With thanks and best regards,

    Mick