Link to home
Start Free TrialLog in
Avatar of Zane80
Zane80Flag for New Zealand

asked on

Delete Individual Files on NS6000 NAS

Hi,
 
I have a virus which has wormed itself into my network. The virus has created folders called 'Recycler' and 'Info' and inside is a .jpg.exe file which when users run it will install on all networked users pc's and all network drives. It also has an autorun.ini which picks it up when you open the drive through the my computer console.
 
It has installed itself on a couple of the NAS shares and has provided read only access to all users apart from one who has read-write access (I assume he ran the file last). Noone has delete access to this file. I dont know how I can remove these files from the NAS. If I logon as the administrator and try and change permissions I get "Access denied" and if I try just a delete i also get "Access Denied"
 
Any suggestions?
ASKER CERTIFIED SOLUTION
Avatar of kenycl
kenycl
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Zane80

ASKER

Nope. I have tried this. The virus scanner cannot delete the file either "access denied" I am using Symantec professional.

The virus frequently was spreading through all network drives and has infected most local computers. I have disabled all users access to root directories of network shares and I have also disabled auto run on all computers (using group policies).

I have deleted the files off all the PC shares but cannot delete off the NAS due to access issues.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Zane80

ASKER

Yes. I have full admin access under both my account and the administrator account.
I tried changing the permisssions with no luck.

The owner is a user called Patrick. His rights have been removed and he is not able to delete this file either.
13-09-2010-5-05-53-p.m..png
Avatar of Zane80

ASKER

Any suggestions for this?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Zane80

ASKER

The path is \BOSWNNAS01\info\Vanja.jpg.exe and an autorun.ini
it is mapped to R:\info\Vanja.jpg.exe

I have disabled the virus from spreading as I was able to delete R:\autorun.ini (dont know how) and I have disabled autorun on all pc's and stopped access to root directory on shared drives.

This virus spread accross every drive including flash drives and has likely affected home computers.I created a batch script for users to run which will delete the main virus. I have also deleted it off the file server's just not the NAS
Avatar of Zane80

ASKER

User very helpful. Ended up removing files off NAS and formatting partition.