Solved

Delete Individual Files on NS6000 NAS

Posted on 2010-09-12
9
583 Views
Last Modified: 2013-12-02
Hi,
 
I have a virus which has wormed itself into my network. The virus has created folders called 'Recycler' and 'Info' and inside is a .jpg.exe file which when users run it will install on all networked users pc's and all network drives. It also has an autorun.ini which picks it up when you open the drive through the my computer console.
 
It has installed itself on a couple of the NAS shares and has provided read only access to all users apart from one who has read-write access (I assume he ran the file last). Noone has delete access to this file. I dont know how I can remove these files from the NAS. If I logon as the administrator and try and change permissions I get "Access denied" and if I try just a delete i also get "Access Denied"
 
Any suggestions?
0
Comment
Question by:Zane80
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 3
9 Comments
 
LVL 4

Accepted Solution

by:
kenycl earned 500 total points
ID: 33659585
at this very point i would suggest scanning your FIle with a antivirus scanner eset or something similar.
at this point i would also suggestion not to logon as an administrator so that it does not have as much privileged to write elsewhere that you may not want it to.

do the scan after hours when no one is using any files and are logged out.

hope you get ride of the virus asap before it hits your OS and courses more trouble for you.
0
 

Author Comment

by:Zane80
ID: 33659637
Nope. I have tried this. The virus scanner cannot delete the file either "access denied" I am using Symantec professional.

The virus frequently was spreading through all network drives and has infected most local computers. I have disabled all users access to root directories of network shares and I have also disabled auto run on all computers (using group policies).

I have deleted the files off all the PC shares but cannot delete off the NAS due to access issues.
0
 
LVL 4

Assisted Solution

by:kenycl
kenycl earned 500 total points
ID: 33659650
presuming the user you use has domain admin access?

what shows as the file owner when you right click on the file and go into security and advanced see if you can change it to yourself and delete that particular one file first.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:Zane80
ID: 33659692
Yes. I have full admin access under both my account and the administrator account.
I tried changing the permisssions with no luck.

The owner is a user called Patrick. His rights have been removed and he is not able to delete this file either.
13-09-2010-5-05-53-p.m..png
0
 

Author Comment

by:Zane80
ID: 33659701
0
 

Author Comment

by:Zane80
ID: 33668046
Any suggestions for this?
0
 
LVL 4

Assisted Solution

by:kenycl
kenycl earned 500 total points
ID: 33668088
the other option i can think of is the lenght of the path is longer than 24.

is the length of the path quite long?

you could try mapping the older to a drive and access and delete that way and try.

sorry im not too sure what else you can do, any guru out there that could help please?
0
 

Author Comment

by:Zane80
ID: 33668132
The path is \BOSWNNAS01\info\Vanja.jpg.exe and an autorun.ini
it is mapped to R:\info\Vanja.jpg.exe

I have disabled the virus from spreading as I was able to delete R:\autorun.ini (dont know how) and I have disabled autorun on all pc's and stopped access to root directory on shared drives.

This virus spread accross every drive including flash drives and has likely affected home computers.I created a batch script for users to run which will delete the main virus. I have also deleted it off the file server's just not the NAS
0
 

Author Closing Comment

by:Zane80
ID: 33880813
User very helpful. Ended up removing files off NAS and formatting partition.
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
physical security query stockroom concern 8 100
SAS Storage with Vcenter 6.0 4 117
EMC vplex question 1 65
VMware PVSCSI SQL Server 2016 AlwaysOn 2 37
Create your own, high-performance VM backup appliance by installing NAKIVO Backup & Replication directly onto a Synology NAS!
Many businesses neglect disaster recovery and treat it as an after-thought. I can tell you first hand that data will be lost, hard drives die, servers will be hacked, and careless (or malicious) employees can ruin your data.
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…
This Micro Tutorial will teach you how to reformat your flash drive. Sometimes your flash drive may have issues carrying files so this will completely restore it to manufacturing settings. Make sure to backup all files before reformatting. This w…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question