cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Back again with another edition of 'How we use Dropbox', so find out how Emma uses to-do lists to get it all done here!

Dropbox accounts & billing

Make your Dropbox account work for you, with the help of Community users like you. Join in or start a discussion of your own.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

URGENT - Unknown Activity in Dropbox Account

URGENT - Unknown Activity in Dropbox Account

chris d.7
New member | Level 1

Anyone from DB reading this - my account is delivering dozens of random unknown file adds and deletion messages. What's going on?

14 Replies 14

Re: URGENT - Unknown Activity in Dropbox Account

Rich
Super User II

Look at your Events page to see the source of the files. View the previous version history of one of the files and it will show you the device name (in parenthesis) that it's originating from.

Re: URGENT - Unknown Activity in Dropbox Account

chris d.7
New member | Level 1

Done - I see files deleted - not by me or any of my colleagues with additional insertions of two files - a ".locky" file and a second file called "_HELP_instructions.txt". 

By the looks of things, the attack went after .xls and .doc files leaving .pdf files intact.

How can I get DB to assist in this and restore the deleted files?

FYI - Passwords have been changed to prevent further activity.

Re: URGENT - Unknown Activity in Dropbox Account

chris d.7
New member | Level 1

Correction - .jpg and .pdf files are also impacted. 

Looks like hundreds to low thousands of files have been impacted.

Re: URGENT - Unknown Activity in Dropbox Account

Rich
Super User II

Locky - http://www.bleepingcomputer.com/news/security/the-locky-ransomware-encrypts-local-files-and-unmapped...

How can I get DB to assist in this and restore the deleted files?

Open a ticket and request a rollback of your account.

Passwords have been changed to prevent further activity.

That won't do anything. The virus is on your computer already, and your password is only used to link your computer to your account. It's no longer used by Dropbox once the computer has been linked.

Re: URGENT - Unknown Activity in Dropbox Account

chris d.7
New member | Level 1

Thank you Rich.

We shut down the assumed problem computer during all this as well - didn't mention that - any quick references  as to how to get rid of this virus?

Re: URGENT - Unknown Activity in Dropbox Account

chris d.7
New member | Level 1

Also is this an issue for both Mac and PC's - just PCs?

Re: URGENT - Unknown Activity in Dropbox Account

Alessandro P.13
New member | Level 1

I have the same problem here. I bought Avast paid version and scan 3 PC, nothing.
I'm tryng with Bit Defender Anti-crypto locker now, let's see.
I also need advice, I have 4 users on a DropBox shered Team folder, I scanned all PC already, it seems not workink with standard anti-virus.
An I don't know what shall I do after to restore the original files.
My IT guy told me that the problem cannot be solved, but we can only pay the hacker to get tne encryption key. Don't believe him.
If anyone has a clue, please inform the community.
Thanks a lot everybody!

Re: URGENT - Unknown Activity in Dropbox Account

Rich
Super User II

any quick references  as to how to get rid of this virus?

Scan your system with any of the leading antivirus and anti-malware applications. You may not find anything though. Some of these ransomware variants are hit-and-run; they encrypt your files and then disappear. If that's the case, just keep your protection software updated and runs scans often to be sure it's gone.

Also is this an issue for both Mac and PC's - just PCs?

It was until recently. The first ransomware virus was recently discovered on a Mac. It was caught pretty quickly so it wasn't very effective, but that doesn't mean much. Once one is found it's just a matter of time until others show up. Welcome to the club! 🙂

My IT guy told me that the problem cannot be solved, but we can only pay the hacker to get tne encryption key. Don't believe him.

If your files were in Dropbox then you can open a ticket and request a rollback of your account (see links posted earlier in this thread). For any files that are outside of Dropbox, you would have to go back to your own backups. You do backup your files, don't you? If you don't have your own backups, then any files outside of Dropbox are lost, unless you pay the ransom, and DO NOT pay the ransom, because you're only enabling them to continue if you do, and there's no guarantee that you'll get your files back.

Re: URGENT - Unknown Activity in Dropbox Account

Ilse B.
New member | Level 1

Hi can anyone please help me. 

Our Dropbox somehow duplicated all our files from one folder to another folder in Dropbox.  I am talking about 180 000 files (113 GB)

The files are currently syncing from the one folder to the other one.  Not one of our users copied these files? 

Is there any way I can check how this happened. 

Can I pause the syncing and copy the new folder to an external hard drive just as a back up?

Poll
We love to learn from the educators who use Dropbox. Whether you teach kids, teens, adults or a combination of all three, we want to know what apps and integrations you use with Dropbox to help with teaching. Which of the ones below is your favorite, or most used tool?
Who's talking

Top contributors to this post

  • User avatar
    Rich Super User II
  • User avatar
    Mark S.99 New member | Level 1
  • User avatar
    Mark Super User II
What do Dropbox user levels mean?
Need more support?