Solved

Delete Individual Files on NS6000 NAS

Posted on 2010-09-12
9
580 Views
Last Modified: 2013-12-02
Hi,
 
I have a virus which has wormed itself into my network. The virus has created folders called 'Recycler' and 'Info' and inside is a .jpg.exe file which when users run it will install on all networked users pc's and all network drives. It also has an autorun.ini which picks it up when you open the drive through the my computer console.
 
It has installed itself on a couple of the NAS shares and has provided read only access to all users apart from one who has read-write access (I assume he ran the file last). Noone has delete access to this file. I dont know how I can remove these files from the NAS. If I logon as the administrator and try and change permissions I get "Access denied" and if I try just a delete i also get "Access Denied"
 
Any suggestions?
0
Comment
Question by:Zane80
  • 6
  • 3
9 Comments
 
LVL 4

Accepted Solution

by:
kenycl earned 500 total points
ID: 33659585
at this very point i would suggest scanning your FIle with a antivirus scanner eset or something similar.
at this point i would also suggestion not to logon as an administrator so that it does not have as much privileged to write elsewhere that you may not want it to.

do the scan after hours when no one is using any files and are logged out.

hope you get ride of the virus asap before it hits your OS and courses more trouble for you.
0
 

Author Comment

by:Zane80
ID: 33659637
Nope. I have tried this. The virus scanner cannot delete the file either "access denied" I am using Symantec professional.

The virus frequently was spreading through all network drives and has infected most local computers. I have disabled all users access to root directories of network shares and I have also disabled auto run on all computers (using group policies).

I have deleted the files off all the PC shares but cannot delete off the NAS due to access issues.
0
 
LVL 4

Assisted Solution

by:kenycl
kenycl earned 500 total points
ID: 33659650
presuming the user you use has domain admin access?

what shows as the file owner when you right click on the file and go into security and advanced see if you can change it to yourself and delete that particular one file first.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 

Author Comment

by:Zane80
ID: 33659692
Yes. I have full admin access under both my account and the administrator account.
I tried changing the permisssions with no luck.

The owner is a user called Patrick. His rights have been removed and he is not able to delete this file either.
13-09-2010-5-05-53-p.m..png
0
 

Author Comment

by:Zane80
ID: 33659701
0
 

Author Comment

by:Zane80
ID: 33668046
Any suggestions for this?
0
 
LVL 4

Assisted Solution

by:kenycl
kenycl earned 500 total points
ID: 33668088
the other option i can think of is the lenght of the path is longer than 24.

is the length of the path quite long?

you could try mapping the older to a drive and access and delete that way and try.

sorry im not too sure what else you can do, any guru out there that could help please?
0
 

Author Comment

by:Zane80
ID: 33668132
The path is \BOSWNNAS01\info\Vanja.jpg.exe and an autorun.ini
it is mapped to R:\info\Vanja.jpg.exe

I have disabled the virus from spreading as I was able to delete R:\autorun.ini (dont know how) and I have disabled autorun on all pc's and stopped access to root directory on shared drives.

This virus spread accross every drive including flash drives and has likely affected home computers.I created a batch script for users to run which will delete the main virus. I have also deleted it off the file server's just not the NAS
0
 

Author Closing Comment

by:Zane80
ID: 33880813
User very helpful. Ended up removing files off NAS and formatting partition.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If, like me, you have a lot of Dell servers in the estate you manage this article should save you a little time. When attempting to login to iDrac on any server I would be presented with two errors. The first reads "Do you want to run this applicati…
Lets start to have a small explanation what is VAAI(vStorage API for Array Integration ) and what are the benefits using it. VAAI is an API framework in VMware that enable some Storage tasks. It first presented in ESXi 4.1, but only after 5.x sup…
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…
This Micro Tutorial will teach you how to reformat your flash drive. Sometimes your flash drive may have issues carrying files so this will completely restore it to manufacturing settings. Make sure to backup all files before reformatting. This w…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question