We help IT Professionals succeed at work.

Virus problem

shahzebasif
shahzebasif asked
on
Dear Experts,

Our library's PCs are infected with a virus. When any user insert a USB into an infected PC this virus will create .exe files with the same name of all USB's folders with the icons like Folder and make all folders to Read only and Hidden.
We just switch from Symantec End Point into Mcafee but non of them can detect the virus.

how we can get rid of this virus from our network?
Comment
Watch Question

Thomas AamodtNetwork Architect

Commented:
Try some of the online scanners like:
http://www.eset.com/us/online-scanner/

or something like that. if not do you have any folder structure or what EXE files it creates?
Or can you look at your prosses and se anythin sucpious there?


Try run these :
http://download.bleepingcomputer.com/reg/FixNCR.reg

Kills unknow tasks in taskmanager :
http://download.bleepingcomputer.com/grinler/eXplorer.exe 

Then run this:
http://www.malwarebytes.org/
William WestlakeDomain Administrator

Commented:
go onto sophos.com
on their home page are free security tools to Scan for security risks, threats and rootkits.
I too used to use Symantec and found that they wern't picking up certain viruses. after switching to sophos... no problems :)

Author

Commented:
Thanks for your reply.
I already used many online scanners but still the virus not detected. I am realy suffering from this virus.
Commented:
Displays or changes file attributes.

ATTRIB [+R | -R] [+A | -A ] [+S | -S] [+H | -H] [+I | -I] [drive:][path][filename] [/S [/D] [/L]]

+ Sets an attribute.
– Clears an attribute.
R Read-only file attribute.
A Archive file attribute.
S System file attribute.
H Hidden file attribute.
I Not content indexed file attribute.
[drive:][path][filename]
Specifies a file or files for attrib to process.
/S Processes matching files in the current folder
and all subfolders.
/D Processes folders as well.
/L Work on the attributes of the Symbolic Link versus
the target of the Symbolic Link

or want easy way to change attributes download usb show software from my blog post @ http://netwanlan.wordpress.com/2012/04/04/recover-hidden-filesfolders-from-portable-storage-devices/

Then afterwards completely scan system :

Here is a list of online virus scans Safety.Live.com (That one is Microsoft's) Symantec.com Housecall.TrendMicro.com Comodo.com...Comodo.com offers free manual disinfection and a free security suite from the makers of Comodo Firewall Pro...besure to turn off onboard antivirus before starting online scanner.