WORKS2016 Posted August 14, 2020 ID:1401260 Share Posted August 14, 2020 I have a client that was hit hard by Lockbit. Took out all the workstations but one on the LAN and two our of 4 servers. It turned off and deleted Shadowcopies too. I have Malwarebytes installed on all the devices and it was never detected. While cleaning up the network I ran Malwarebytes and it didn't detect anything. Alarming and strange. I then downloaded Spy Hunter 5 and ran a scan and the ransomeware is detected. All my clients have Malwarebytes Endpoint protection, why and how would Malwarebytes skip over the ransomware even after I know 100% it's on the network. It's done so on all devices. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 14, 2020 Root Admin ID:1401272 Share Posted August 14, 2020 Hello @WORKS2016 Can you please run the following from one of the infected computers. I would also like to get logs from Spy Hunter 5 to show what they found. Upload Malwarebytes Support Tool logs offline Thank you Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 14, 2020 Root Admin ID:1401275 Share Posted August 14, 2020 Please see the following topics concerning Ransomware on the Bleeping Computer site Ransomware Help & Tech Supporthttps://www.bleepingcomputer.com/forums/f/239/ransomware-help-tech-support/ The following reply would also apply in your casehttps://www.bleepingcomputer.com/forums/t/716458/lockbit-ransomware-lockbit-lock2bits-support-topic/page-4#entry5041920 Removing Ransomware From An Infected Computer:https://www.bleepingcomputer.com/forums/t/691026/can-antivirus-software-remove-ransomware-from-my-infected-system/?p=4692721 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 17, 2020 Root Admin ID:1401954 Share Posted August 17, 2020 Hello @WORKS2016 Did you need any further assistance with this? Please post a status update when you have a moment Thank you Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 31, 2020 Root Admin ID:1404692 Share Posted August 31, 2020 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following for Tips to help protect from infection Thank you Link to post Share on other sites More sharing options...
Recommended Posts