Link to home
Start Free TrialLog in
Avatar of Micarta46
Micarta46

asked on

SBS 2008 public share drive folder spawning

Hello Experts,

Yesterday I noticed the our shared "public" drive has beed automatically spawning 2 character folder names with a long hexadecimal file inside.

I can delete some of them, but several are read only.
After i delete the ones i can they will respawn on there own.

My guess is a virus but nothing is detected.

Thanks in advance,
Avatar of Manpreet SIngh Khatra
Manpreet SIngh Khatra
Flag of India image

Could be some Virus or something .. hope the AV is set and did someone try to remove and readd or who else does manage the server ?

- Rancy
ASKER CERTIFIED SOLUTION
Avatar of btan
btan

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
What are you using to detect virus/malware on the server?

The truth is that most likely the server is compromised at a low level and probably needs to be flattened and reinstalled...that's the only true way to know that you got it.

Put the data on a portable drive that you can scan with Malwarebytes or SuperAntiSpyware (or both)   Once you know it's clean, you can copy back to the newly installed server
Avatar of Micarta46
Micarta46

ASKER

This gave me something to think about. It ended up being my current AV solutions definitions were out of date. A new AV scan caught & cleared the issue.