• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1987
  • Last Modified:

Network hit with sexy.exe, porn.exe, secret.exe, password.exe etc.

Looks like our network got smashed with the above virus. They are worms it looks like.

we have sophos

When accessing our network drives on various servers it has changed the file structure and folders to .EXE's etc and files are being hidden.
how to stop this from spreading and how to clean this up
0
Lidka
Asked:
Lidka
  • 3
  • 2
  • 2
1 Solution
 
Thomas GrassiSystems AdministratorCommented:
0
 
Gabriel CliftonNet AdminCommented:
You can remove it with malwarebytes antimalware and combofix from bleepingcomputer.com. To help stop it from spreading while cleaning I would disconnect everything from the domain and start from the servers and work my way down.
0
 
LidkaAuthor Commented:
this is spreading fast how do I know where it originated
0
Introducing Cloud Class® training courses

Tech changes fast. You can learn faster. That’s why we’re bringing professional training courses to Experts Exchange. With a subscription, you can access all the Cloud Class® courses to expand your education, prep for certifications, and get top-notch instructions.

 
Gabriel CliftonNet AdminCommented:
It would be hard to determine where it originated but you can use wireshark to filter packets being sent and try to go from there.
0
 
LidkaAuthor Commented:
what is the best tool to remove this virus ?
0
 
Gabriel CliftonNet AdminCommented:
Malwarebytes antimalware, spybot search & destroy, and combofix from bleeping computer are good.
0
 
Thomas GrassiSystems AdministratorCommented:
I would use a more well known company would not use freeware or shareware prodcuts to protect your server.

I suggest Kaspersky

http://www.kaspersky.com/virus-removal-tools
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 3
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now