We got a virus on our server this pass few days. We cought the following executables:
OFFER.EXE
MARK.EXE
MSGFIX.EXE
PORN_XXX_CRACK.EXE
TGB.EXE
UJM.EXE
To name a few. We terminated the process of these executables and cleaned their entries from the registry. However, today our servers fell victim to another one: Systems32.exe. We are able to connect to the server however we were unable to open any windows. We re-started the server and then we were able to work on it on safe mode. Even though we eliminated the executable from our system for some reason some our users are unable to connect the shared drives on the server. Any idea of what else could it be? Maybe we are missing an entry or perhaps there is an application besides Norton Antivirus we should use? Thanks in advance for the help.
:-|