Solved

Mapped Drives will not appear

Posted on 2008-10-08
8
245 Views
Last Modified: 2012-05-05
Hello,
I have just been notiicing that some laptops and desktops in our environment have been getiing the error in the attached file when they click on a Mapped drive. These mapped drives are applied at logon. Majority of the desktops/laptops are fine but the few that have the problen is causing concern.
Error.doc
0
Comment
Question by:SBhagudia
  • 3
  • 3
  • 2
8 Comments
 
LVL 26

Assisted Solution

by:lnkevin
lnkevin earned 100 total points
ID: 22671795
Make sure you have your virus protection updated and scan those pcs. Looks like the PC get infected my some worm.

K
0
 
LVL 26

Expert Comment

by:lnkevin
ID: 22671844
You have to take those infected PCs offline to prevent it spreading to others in the network. Update to the lastest virus definition and spyware detector then perform the scans on the infected PCs. If it is easy to rebuild the PC, rebuild from scratch. Make sure you update and scan your server as well. 9 out of 10 your network is infected.

K
0
 
LVL 4

Assisted Solution

by:smittyboom
smittyboom earned 50 total points
ID: 22671853
With a google search a lot of information came up about a virus. Have you checked in to this at all?
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DELF.BRF&VSect=T
0
 

Author Comment

by:SBhagudia
ID: 22672993
I have scanned all the desktops/laptops that have the issue for viruses (symantec, ad-aware, spybot,Trend Micro) and they have all come up empty. Also I can log in to my pc and access all the netowrk drives, but if I were to log on to one of the problem pc's then I get the error message on 4 of the 6 mapped drives.
Thanks,
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 4

Expert Comment

by:smittyboom
ID: 22673131
What is the difference between the 4 you cant and the 2 you can? Are they on different servers, locations, vlans?
0
 

Author Comment

by:SBhagudia
ID: 22673726
They are all on teh same server. We just made some progress. We found that in the registry of the problem computer (HKEY_CURRENT_USER/Software/Microsoft/Windows/Current Version/Explorer/Mountpoints2) there was an extra registry entry with the file name called Shell. Once we deleted the entry and relogged on to the pc, we were able to log on to the mapped network drives which we were not ble to before.
Although the scans have come out negative, a worm running through cannot be discounted and we would still like to know why the computers are being affected now.

 
0
 
LVL 26

Expert Comment

by:lnkevin
ID: 22677876
why the computers are being affected now...

Most of the time, the viruses or worms came from the web site through your employee download, IRC chat, infected emails, infected files.... You just have to build Anti Virus Enterprise server so you can tell who is infected first and making decision from there.

K
0
 

Accepted Solution

by:
SBhagudia earned 0 total points
ID: 22688210
Thank you all for all your help and assistance in lloking for a Soution. It has been 3 days now and no new cases have been reported. After cleaning out the suspect folder from the registry that I have mentioned before, the users are not experiencing issues with the network drives anymore.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
Resolve DNS query failed errors for Exchange
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now