Word and Excel Files changed to .exe

[KenSmellsGood]

Our sister company apparently contracted a worm that changed all of their .doc(x) and .xls(x) files to .exe files. Does anyone here have experience with this worm, and if so what was your solution?

If what I'm reading online is right, this worm is pretty old so I'm not sure how they would get it. I'm also not at that site so the only information I have is what my boss has told me.

 

[Ranger4]

Hi KenSmellsGood, welcome to Windows Seven Forums.

Read through this MS website & see if that resolves the problem for you.

A Microsoft Excel, Word or PowerPoint file does not open because of incorrect file associations

Also this one as well. The link I posted above is taken from this one but there is other info that might help.

Windows Updated & Now Broken File Associations - Microsoft Community

 

[KenSmellsGood]

Thanks... I've been able to fix association issues before. In this case the actual extensions have been changed. We had a guy who told us it may be Cryptolocker. I've never had to deal with it so I wouldn't know.

 

[DavidE]

Here is a MBAM Removal Guide for Cryptolocker:

https://forums.malwarebytes.org/index.php?/topic/134420-removal-instructions-for-cryptolocker/

 

[Ranger4]

Cryptolocker is a very serious infection.

Have a look at this Youtube video, which gives a method of removing it. As far as I know Cryptolocker will become very evident on your computer & let you know that it is there as they want a ransom to be paid to unlock it.

Let us know how you get on. What AV programs are you using?. You could do a full scan of your system to see if it picks up anything.