Results 1 to 3 of 3
  1. #1
    New Lounger
    Join Date
    Mar 2010
    Location
    London, Ontario, Canada
    Posts
    13
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Data files renamed / encrypted?

    I know it sounds like Ransomware of some kind. Colleague was called to a client's office to investigate her sudden inability to open her data files (Word, Excel and PDF files).

    He found her files had been renamed - the file extensions were all changed to .vault Files don't open by renaming them back with their proper extensions.

    Scanned with several malware/AV scanners, found nothing.

    One would think if it were ransomware there would be a demand, right?

    Anyone have any ideas? Yes, the files are backed up regularly, so there is a way out. We are a bit worried that we are overlooking something, and the issue could come back...

    Thx

  2. #2
    Super Moderator RetiredGeek's Avatar
    Join Date
    Mar 2004
    Location
    Manning, South Carolina
    Posts
    9,436
    Thanks
    372
    Thanked 1,457 Times in 1,326 Posts
    Is it possible your client is using Bit Defender?

    If so take a look at this. HTH
    May the Forces of good computing be with you!

    RG

    PowerShell & VBA Rule!

    My Systems: Desktop Specs
    Laptop Specs

  3. #3
    Super Moderator Rick Corbett's Avatar
    Join Date
    Dec 2009
    Location
    South Glos., UK
    Posts
    2,143
    Thanks
    101
    Thanked 580 Times in 464 Posts
    Sounds like your colleague's client is using McAfee and has inadvertently used File Lock (which changes file extensions to .vault).

    Hope this helps...

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •