Solved

Delete Individual Files on NS6000 NAS

Posted on 2010-09-12
9
578 Views
Last Modified: 2013-12-02
Hi,
 
I have a virus which has wormed itself into my network. The virus has created folders called 'Recycler' and 'Info' and inside is a .jpg.exe file which when users run it will install on all networked users pc's and all network drives. It also has an autorun.ini which picks it up when you open the drive through the my computer console.
 
It has installed itself on a couple of the NAS shares and has provided read only access to all users apart from one who has read-write access (I assume he ran the file last). Noone has delete access to this file. I dont know how I can remove these files from the NAS. If I logon as the administrator and try and change permissions I get "Access denied" and if I try just a delete i also get "Access Denied"
 
Any suggestions?
0
Comment
Question by:Zane80
  • 6
  • 3
9 Comments
 
LVL 4

Accepted Solution

by:
kenycl earned 500 total points
ID: 33659585
at this very point i would suggest scanning your FIle with a antivirus scanner eset or something similar.
at this point i would also suggestion not to logon as an administrator so that it does not have as much privileged to write elsewhere that you may not want it to.

do the scan after hours when no one is using any files and are logged out.

hope you get ride of the virus asap before it hits your OS and courses more trouble for you.
0
 

Author Comment

by:Zane80
ID: 33659637
Nope. I have tried this. The virus scanner cannot delete the file either "access denied" I am using Symantec professional.

The virus frequently was spreading through all network drives and has infected most local computers. I have disabled all users access to root directories of network shares and I have also disabled auto run on all computers (using group policies).

I have deleted the files off all the PC shares but cannot delete off the NAS due to access issues.
0
 
LVL 4

Assisted Solution

by:kenycl
kenycl earned 500 total points
ID: 33659650
presuming the user you use has domain admin access?

what shows as the file owner when you right click on the file and go into security and advanced see if you can change it to yourself and delete that particular one file first.
0
 

Author Comment

by:Zane80
ID: 33659692
Yes. I have full admin access under both my account and the administrator account.
I tried changing the permisssions with no luck.

The owner is a user called Patrick. His rights have been removed and he is not able to delete this file either.
13-09-2010-5-05-53-p.m..png
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 

Author Comment

by:Zane80
ID: 33659701
0
 

Author Comment

by:Zane80
ID: 33668046
Any suggestions for this?
0
 
LVL 4

Assisted Solution

by:kenycl
kenycl earned 500 total points
ID: 33668088
the other option i can think of is the lenght of the path is longer than 24.

is the length of the path quite long?

you could try mapping the older to a drive and access and delete that way and try.

sorry im not too sure what else you can do, any guru out there that could help please?
0
 

Author Comment

by:Zane80
ID: 33668132
The path is \BOSWNNAS01\info\Vanja.jpg.exe and an autorun.ini
it is mapped to R:\info\Vanja.jpg.exe

I have disabled the virus from spreading as I was able to delete R:\autorun.ini (dont know how) and I have disabled autorun on all pc's and stopped access to root directory on shared drives.

This virus spread accross every drive including flash drives and has likely affected home computers.I created a batch script for users to run which will delete the main virus. I have also deleted it off the file server's just not the NAS
0
 

Author Closing Comment

by:Zane80
ID: 33880813
User very helpful. Ended up removing files off NAS and formatting partition.
0

Featured Post

Give your grad a cloud of their own!

With up to 8TB of storage, give your favorite graduate their own personal cloud to centralize all their photos, videos and music in one safe place. They can save, sync and share all their stuff, and automatic photo backup helps free up space on their smartphone and tablet.

Join & Write a Comment

Suggested Solutions

Preface There are many applications where some computing systems need have their system clocks running synchronized within a small margin and eventually need to be in sync with the global time. There are different solutions for this, i.e. the W3…
How to update Firmware and Bios in Dell Equalogic PS6000 Arrays and Hard Disks firmware update.
This video teaches viewers how to encrypt an external drive that requires a password to read and edit the drive. All tasks are done in Disk Utility. Plug in the external drive you wish to encrypt: Make sure all previous data on the drive has been …
This Micro Tutorial will teach you how to reformat your flash drive. Sometimes your flash drive may have issues carrying files so this will completely restore it to manufacturing settings. Make sure to backup all files before reformatting. This w…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now