GrImzkunk 0 Posted September 15, 2015 Share Posted September 15, 2015 I just found and deleted two "HELP_DECRYPT.PNG" files on my business file server. Both were on shared drive root. I have no anti-virus on my file server. What I did is I search for crypto*.* on this file server, and found nothing. I also install Malwarebytes and did a "Threat Scan", nothing were found. Our ~250 business desktop computers all have ESET Endpoint Antivirus installed. No files seems to be encrypted so far. How is it possible? What should I do? Thanks! Link to comment Share on other sites More sharing options...
Administrators Marcos 5,406 Posted September 15, 2015 Administrators Share Posted September 15, 2015 Unfortunately, if ESET was not installed on the server and no logs are available for analysis, it's impossible to tell what happened if you are positive that nobody was browsing the web or reading email on the server. You can send me the output from running ESET Log Collector (hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN3466) to make sure that ESET is configured for maximum protection. Link to comment Share on other sites More sharing options...
GrImzkunk 0 Posted September 15, 2015 Author Share Posted September 15, 2015 Ok. I will buy a "Eset File Security" license for this file server. Thx Link to comment Share on other sites More sharing options...
Recommended Posts