Link to home
Start Free TrialLog in
Avatar of mrmut
mrmutFlag for Croatia

asked on

How to get rid of gfxdrv.exe and gxdrv.exe on 2003 server?

I have a serious issue on one old terminal server (2003).

I have recurring virus, coinminer it seems, which I don't know how it passes into the computer. It is quite isolated environment.

It creates either gfxdrv.exe or gxdrv.exe in windows\temp and coin mines.

Did anyone encountered this problem? I don't know how to get dir of it.

ASKER CERTIFIED SOLUTION
Avatar of Dr. Klahn
Dr. Klahn

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of mrmut

ASKER

What I did is created two folders without permissions, which will effectively block the files from being reinstated in the TEMP.

Is the GPO restriction system wide, or directory restricted?

Also - do you happen to know of a database of all updates for 2003 released after end of support?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of mrmut

ASKER

I didn't know you could buy support for 2003? Is there a way to get these updates?

I will make sys. wide GPO tomorrow, have to go to sleep now. I was working on this for hours now (it is midnight here).
Avatar of Dr. Klahn
Dr. Klahn

Regrettably, the Premium Support contract period for Server 2003 has expired.  Custom Support Agreements are available but these contracts are amazingly expensive and require a firm commitment to get off the expired platform.  And Microsoft monitors that progress.

"CSAs usually required the customer to pledge to migrate to a supported edition of a product, with contract milestones expressed as percentages of the CSA-covered systems upgraded to a newer version within a given period, say a year. Failure to meet those migration "thresholds" meant Microsoft would refuse to renew the deal or cut off support."

See also:

https://redmondmag.com/articles/2015/06/22/windows-server-2003-support.aspx

"CSA costs are tallied up based on the number of devices under support. In the first year, the per-device cost will be approximately the same as the price of the original Windows Server 2003 license, or around $600 to $700 per license for the Standard edition. In the next year, that price will double. In the third year, Microsoft doubles the second-year price."

So by 2020 it would be $2400 per device per year, with a minimum number of devices - Microsoft is very secretive about CSAs.
Avatar of mrmut

ASKER

I guess it is in their best interest to get users to a new software / hardware. I will try to see with them locally what is possible in regard to this.

Thanks for the tip tho!
Avatar of mrmut

ASKER

Thanks a lot for help.