Dodgy .zip attachment with JScript file opened, now Office files are corrupt

P

PostmanPot

Honorary Master
Joined
Jul 16, 2005
Messages
35,014
Reaction score
81
Location
Cape Town
Hi all

Receptionist opened a dodgy .zip attachment containing a JScript file, thinking it was a CV, now all the existing Office documents on the machine are corrupt.

The file seems to have loaded a 'PC Support' program on the machine. Malwarebytes has taken care of that.

Is there a way around this?

psVFUJml.png


TIA.
 
Cryptolocker.

Search for a file called Decrypt. If a bunch of things come up, it is cryptolocker.

If it, install malwarebytes scan in safe mode, remove all infections.

If you were lucky enough to have previous versions enabled, restore from last safe save, if not really hope you have backups.
 
Definitely CryptoLocker? Don't recall seeing any folders with txt how tos etc.

Will check.

Doubt there were any restore points. Oh well.
 
What anti-virus is on the PC? Had quite a few on those JScript attachments going around, they are mostly ransomware viruses, someone are even able to delete all email and contacts in Outlook.
 
NomNom said:
What anti-virus is on the PC? Had quite a few on those JScript attachments going around, they are mostly ransomware viruses, someone are even able to delete all email and contacts in Outlook.
Click to expand...

Looks like ransomware yes, as that PC support program was installed as a result.

AVG... :(
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X