Jump to content

Recommended Posts

I have a client that was hit hard by Lockbit. Took out all the workstations but one on the LAN and two our of 4 servers. It turned off and deleted Shadowcopies too. I have Malwarebytes installed on all the devices and it was never detected.

While cleaning up the network I ran Malwarebytes and it didn't detect anything. Alarming and strange. I then downloaded Spy Hunter 5 and ran a scan and the ransomeware is detected. All my clients have  Malwarebytes Endpoint protection, why and how would Malwarebytes skip over the ransomware even after I know 100% it's on the network. It's done so on all devices.

Link to post
Share on other sites
  • Root Admin

Please see the following topics concerning Ransomware on the Bleeping Computer site

Ransomware Help & Tech Support
https://www.bleepingcomputer.com/forums/f/239/ransomware-help-tech-support/

The following reply would also apply in your case
https://www.bleepingcomputer.com/forums/t/716458/lockbit-ransomware-lockbit-lock2bits-support-topic/page-4#entry5041920

Removing Ransomware From An Infected Computer:
https://www.bleepingcomputer.com/forums/t/691026/can-antivirus-software-remove-ransomware-from-my-infected-system/?p=4692721

 

Link to post
Share on other sites
  • 2 weeks later...
  • Root Admin

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you

 

 

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.