Viruses

[Richard Kreiss]

I was told the name.  It affected more than just MS office documents.  They
use Open Office also.

The person I need to speak with is traveling today.  I'll try to find out
what the virus was.

Richard

> -----Original Message-----
> From: filepro-list-bounces+rkreiss=verizon.net at lists.celestial.com
> [mailto:filepro-list-bounces+rkreiss=verizon.net at lists.celestial.com] On
> Behalf Of Walter D Vaughan Jr
> Sent: Monday, September 16, 2013 9:09 AM
> To: filePro Mailing List
> Subject: RE: Viruses
> 
> What was the name of the virus, and how did they remove it?
> 
> I have seen of a few machines that after this past week's Patch Tuesday,
> after a reboot the "Open With" was changed from Microsoft Word or Excel to
> just Microsoft Office which of course made most office documents look like
> they were gone/broken/etc. The problem was never with the data files.
> Changing the "Open with" back to the proper application seemed to have
> fixed it in their cases.
> 
> 
> > -----Original Message-----
> > On Behalf Of  Richard Kreiss
> > Sent: Sunday, September 15, 2013 9:25 PM
> > To: filepro-list at lists.celestial.com
> > Subject: Ot: Viruses
> >
> > One of my clients early Friday morning to advise me to stay off of
> > their system.  They were being attacked by a virus that was encrypting
> > or making unreadable a large list of Office type of documents and photo
> formats.
> They
> > eventually found the machine from which the virus infected their system.
> >
> > Luckily  filePro was not damaged by this attacked except for an old
> > mdb
> file.
> >
> > They did have backups which were made to a NAS.  However even the
> > files on the NAS were attacked.
> >
> > The suggestion I made to him, and it is not original with me, was to
> backup his
> > system to the NAS and the backup the NAS to tape.  His comment to me
> > was tape is old school.  My answer was that the tape would not have
> > been attacked.  Yes, if he backed up on Friday it would have been
> > infected
> files.
> > However, the backup for that day would not have been made.
> >
> > Just a suggestion.
> >
> > By the way, they are running Windows Defender and Malwarebytes, which
> > missed the particular virus attacking their system.
> >
> >
> > Richard Kreiss
> > GCC Consulting
> >
> > Office: 410-653-2813
> >
> >
> > _______________________________________________
> > Filepro-list mailing list
> > Filepro-list at lists.celestial.com
> > Subscribe/Unsubscribe/Subscription Changes
> > http://mailman.celestial.com/mailman/listinfo/filepro-list
> 
> _______________________________________________
> Filepro-list mailing list
> Filepro-list at lists.celestial.com
> Subscribe/Unsubscribe/Subscription Changes
> http://mailman.celestial.com/mailman/listinfo/filepro-list