All the computers were infected with virus. I can't seem to identify the virus name. Has used Norton Anti Virus to scan the whole computer but to no avail (Zero Detection).
But what I did know about the characteristics of the virus is that it likes to create an application with an icon folder under each drive. e.g. even for USB External Mass Storage Drive. Then under each folder, it creates another application with icon folder under that folder using the name of the folder it resides in.
Example: Under D:/ it creates New Folder.exe. If I have folders under D: drive such as My Pictures, Cards...etc. the virus created My Pictures.exe, Cards.exe...etc under each of the folders it resides in. Each file that the virus created has size of 262KB.
If I have a pen drive and formatted it, and then open it, I will find New Folder.exe under the pen drive directory. One more thing, under C:/windows, there is a scvhost.exe with icon folder in every infected computer.
Then, I try to find the answers to these all confusions in www.symantec.com
and type svchost in the Search Engine box. When I click one of the links, the computer restarts by itself. If run regedit, the windows will show Error Message: "The Registry Editing has been disabled by your administrator", then restarts it.
I would really appreciate it if someone can find the answers to these questions:
1.) What is the name of the virus?
2.) How to remove it completely?