How to handle CTB Locker virus on O365

A customer had some libraries synced from SharePoint in Office365 to the local computer, and unfortunately clicked a link in a mail that contained the virus (or malware or whatever its called) CTB Locker which “encrypted” all the files in the synced library. The files could not be opened, two files called “How to decrypt the files” were added into the library, the file icon got the unassociated look and the computer name was added at the end of the file:

virusfiler

Continue reading “How to handle CTB Locker virus on O365”