Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Praise

The virus has changed the file extension.

Feb 9, 2015 11:13PM PST

Hello Friends
My computer recently got a strange virus
Change the extension of all files (Word, Excel, Photoshop, etc.)

File extensions such as:
10.93.DOCX.kbuibxd
amar.XLSX.kbuibxd
khorasan.XLSM.kbuibxd

Note: Only files with uppercase extensions

Please help me because I have lost important files

Even after changing the file extension, the file is corrupted and can not be opened

Note: This post was edited by a forum moderator to remove exposed email address to prevent abuse by spammers on 02/10/2015 at 9:24 AM PT

Discussion is locked

- Collapse -
No backups?
Feb 9, 2015 11:31PM PST
- Collapse -
I see the OP has posted at bleeping computer.
Feb 9, 2015 11:40PM PST

Dafydd.

- Collapse -
Thanks
Feb 10, 2015 12:18AM PST

Just noticed he posted his problem in many forums.
Desperation.

- Collapse -
I see 5 forums so far.
Feb 10, 2015 4:03AM PST

You can imagine their shock over this infection. Let's hope others learn what many CNET moderators have written over the years.

-> We only lose what we don't backup. <-

It's also true that no antivirus today stops all the malware out there. This one looks like the typical ransom ware but in this forum they didn't share enough to know which ransom it was.
Bob

- Collapse -
The other forums noticed the cross posting.
Feb 10, 2015 4:05AM PST

This from BC:

"You also posted your issue today here https://forums.malwarebytes.org/index.php?/topic/164658-the-virus-has-changed-the-file-extension/

You should only seek malware removal help at one forum.

We ask that you select one forum from those where you sought help and ask the others to close your topics.

Although we understand you wish your problems to be addressed as soon as possible, there are reasons why multi-posting causes problems.

By Multi Posting you are utilizing the time of two (or more) trained helpers. Helpers take a long time to train. They need a great deal of expertise and knowledge to be able to safely remove Malware from your computer and because of this are in short supply. We wish to use them to help the maximum number of people, and if they are researching the log of someone who is already being helped, then their time and effort is going to waste.

Understandably this causes a certain amount of bad feeling and frustration

From the helper who has needlessly spent time researching your log and compiling and posting instructions.
From others who have to wait longer for their problems to be addressed.

Advice from two separate helpers can cause problems.

A helper at one place has no idea what a helper somewhere else is doing. Different helpers may use different methods to combat your infection. While each one is safe to use, problems can arise if you follow the advice of both together. Some of the tools used are very powerful and have to be used in a specific way and in some cases do not combine well with others. By using advice from two different sources it is possible that tools may be used that do not combine well and you may severely damage your computer, even rendering it inoperable in some circumstances. By following BOTH sets of instructions, the clean up process could be delayed.

Please let us know WHERE you want to continue to receive help from. If elsewhere this topic will be closed. "

- Collapse -
MalwareBytes forums seems to have the bible on this one.
Feb 10, 2015 4:08AM PST
- Collapse -
Let me explain why I added MrC's answer.
Feb 10, 2015 11:59PM PST

It appeared to be the best of all the answers to date about this RASONWARE. While most have heard others tell them to backup, no one seems to follow up why.

Now you know why you backup what you can't lose.
Bob

- Collapse -
The virus has changed the file extension.
May 10, 2015 7:25PM PDT

Hello Friends
My computer recently got a strange virus
Change the extension of all files (Word, Excel, Photoshop, etc.)

File extensions such as:
TC239.DOCX.ibdoosj
TC230.XLSX.ibdoosj
mkm.XLSM.ibdoosj

Note: Only files with uppercase extensions

Please help me because I have lost important files

Even after changing the file extension, the file is corrupted and can not be opened

- Collapse -
Read through
May 10, 2015 7:29PM PDT

All posts in this thread.

I fear all may be lost if you have no safe backups somewhere else.