Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Mapped Drives will not appear

Posted on 2008-10-08
8
248 Views
Last Modified: 2012-05-05
Hello,
I have just been notiicing that some laptops and desktops in our environment have been getiing the error in the attached file when they click on a Mapped drive. These mapped drives are applied at logon. Majority of the desktops/laptops are fine but the few that have the problen is causing concern.
Error.doc
0
Comment
Question by:SBhagudia
  • 3
  • 3
  • 2
8 Comments
 
LVL 26

Assisted Solution

by:lnkevin
lnkevin earned 100 total points
ID: 22671795
Make sure you have your virus protection updated and scan those pcs. Looks like the PC get infected my some worm.

K
0
 
LVL 26

Expert Comment

by:lnkevin
ID: 22671844
You have to take those infected PCs offline to prevent it spreading to others in the network. Update to the lastest virus definition and spyware detector then perform the scans on the infected PCs. If it is easy to rebuild the PC, rebuild from scratch. Make sure you update and scan your server as well. 9 out of 10 your network is infected.

K
0
 
LVL 4

Assisted Solution

by:smittyboom
smittyboom earned 50 total points
ID: 22671853
With a google search a lot of information came up about a virus. Have you checked in to this at all?
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DELF.BRF&VSect=T
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:SBhagudia
ID: 22672993
I have scanned all the desktops/laptops that have the issue for viruses (symantec, ad-aware, spybot,Trend Micro) and they have all come up empty. Also I can log in to my pc and access all the netowrk drives, but if I were to log on to one of the problem pc's then I get the error message on 4 of the 6 mapped drives.
Thanks,
0
 
LVL 4

Expert Comment

by:smittyboom
ID: 22673131
What is the difference between the 4 you cant and the 2 you can? Are they on different servers, locations, vlans?
0
 

Author Comment

by:SBhagudia
ID: 22673726
They are all on teh same server. We just made some progress. We found that in the registry of the problem computer (HKEY_CURRENT_USER/Software/Microsoft/Windows/Current Version/Explorer/Mountpoints2) there was an extra registry entry with the file name called Shell. Once we deleted the entry and relogged on to the pc, we were able to log on to the mapped network drives which we were not ble to before.
Although the scans have come out negative, a worm running through cannot be discounted and we would still like to know why the computers are being affected now.

 
0
 
LVL 26

Expert Comment

by:lnkevin
ID: 22677876
why the computers are being affected now...

Most of the time, the viruses or worms came from the web site through your employee download, IRC chat, infected emails, infected files.... You just have to build Anti Virus Enterprise server so you can tell who is infected first and making decision from there.

K
0
 

Accepted Solution

by:
SBhagudia earned 0 total points
ID: 22688210
Thank you all for all your help and assistance in lloking for a Soution. It has been 3 days now and no new cases have been reported. After cleaning out the suspect folder from the registry that I have mentioned before, the users are not experiencing issues with the network drives anymore.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn about cloud computing and its benefits for small business owners.
In-place Upgrading Dirsync to Azure AD Connect
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question