Got a major issue thats just developed at work - nearly an entire drives worth of data seems to have been corrupted in the last hour
thats nearly 90 thousand excel, word, pdf and autocad files that are now just full of gibberish
only picture files actually seem to work.....
this only affects the one drive at the moment - but its on the same physical disk as 2 other drives which appear to be working perfectly...
any ideas ?
[Edited on 19/2/2014 by mcerd1]
Are any of your users infected with the CryptoLocker virus?
Do you have shadow copies/previous versions enabled? (Assuming this is a Windows box that is...)
quote:
Originally posted by ironside
Are any of your users infected with the CryptoLocker virus?
quote:
Originally posted by McLannahan
Do you have shadow copies/previous versions enabled? (Assuming this is a Windows box that is...)
quote:
Originally posted by mcerd1
quote:
Originally posted by McLannahan
Do you have shadow copies/previous versions enabled? (Assuming this is a Windows box that is...)
we do have off line backups - but that would mean loosing 2 - 3 days worth of work for all of us![]()
quote:
Originally posted by McLannahan
Shadow copies/previous versions is not the same as backups - it's a snapshot of the selected shared drive taken at scheduled points throughout the day/night. It's certainly not an alternative to a good backup but ideal for a situation like this....If it's enabled of course!![]()
quote:
Originally posted by mcerd1
quote:
Originally posted by ironside
Are any of your users infected with the CryptoLocker virus?
don't think so - and we arn't getting any ransom demands
I'd lay money this is Cryptolocker
If you haven't already, pull the network cable out.
quote:
Originally posted by iank
Surely only the infected user would be getting the ransom demands, and they might, ahem, be keeping their head down!
Virus scan of every computer on the network would be my first step.
Very scary stuff
Do you know how much they were asking for?
quote:
Originally posted by mookaloid
Very scary stuff![]()
Do you know how much they were asking for?
quote:
Originally posted by mcerd1
our IT support company (well know national company staffed by monkeys) have apparently isolated it and are replacing the affected files with the ones on the backup - mind you I don't trust them as far as I could throw them, they've already screwed up a couple of other programs today while 'fixing' the virus issue(no idea why the boss won't go elsewhere...)
![]()
[Edited on 19/2/2014 by mcerd1]
quote:
Originally posted by mcerd1
quote:
Originally posted by mookaloid
Very scary stuff![]()
Do you know how much they were asking for?
no idea - but google it and you'll get some scary stats about the amount of cash they may have got from other folk....
our IT support company (well know national company staffed by monkeys) have apparently isolated it and are replacing the affected files with the ones on the backup - mind you I don't trust them as far as I could throw them, they've already screwed up a couple of other programs today while 'fixing' the virus issue(no idea why the boss won't go elsewhere...)
quote:
Originally posted by Ben_Copeland
Because they are all the same... ours is anyway !
quote:
Originally posted by mcerd1
quote:
Originally posted by Ben_Copeland
Because they are all the same... ours is anyway !
ours have a reputation of being one of the worst of the worst![]()
we were with a smaller company that could at least fix things properly - but they got bought over a few years ago and for some unknown reason we've stayed with them.....
In my area a lot of the l the lawyers and accountants offices have been getting hit with virus laden emails mostly claiming to come from either
government departments including Scottish Courts, HMCRC or respectable companies such as SAGE, TNT or a bank (are banks still considered respectable
!).
The emails aren't getting hits in the sbl-xbl.spamhaus.org blacklist but but can be flagged because they are routed from Russia, Liberia, and
Brazil. The sparsely worded email with the attachment is worded in a away the would arouse suspicion in anybody who deals with these organisations.
well the monkeys are still at work - so far they've had 2 failed attempts to fix it (i.e. copy the file off the back up) and thats taken them at
least 8 of our working hours....
this really is just a big copy / paste job - how can they get that wrong
[Edited on 20/2/2014 by mcerd1]
Regardless of whether your boss will switch IT companies - surely it has to worth spending a few hundred quid on a daily, on-site backup so you no longer need to rely on outside sources?
quote:
Originally posted by mcerd1
well the monkeys are still at work - so far they've had 2 failed attempts to fix it (i.e. copy the file off the back up) and thats taken them at least 8 of our working hours....
this really is just a big copy / paste job - how can they get that wrong![]()
[Edited on 20/2/2014 by mcerd1]