Windows Server 2000/2003 Thread, Profile & Share Permission Problems:( in Technical; Hi
I have removed 2 viruses from our large network Conflicker & Auto.inf it spread onto 3 servers one MIS ...
20th April 2010, 06:57 PM #1
IDG Tech News
23rd April 2010, 08:46 PM #2
- Rep Power
Anyone out there?
24th April 2010, 12:40 AM #3
We had a problem with confiker last year.
Did you completely removed the Confiker yet or not?
By reading your post it looks to me that it has spread on the network if it was on the file server because it spread through share drives. Share problem means that the machines are still affected with this virus. Check the logs on the clients & domain controller.
Stop the autorun from the group policy which will stop it spreading and check the log files. Particularly for failed authentication logs. There may be machines on your network which are trying to log on to all machines. Remove the machines from network immediately which are affected. Configure Antivirus aggressively to delete any suspicious file or programme like a virus.
We did not have this kind of problem ( Share & Profile ) on our network. It locked everyone's account on our network. Confiker spread on every machine on our network because it was not updated with windows update and no antivirus. Check the link below
We struggled for at least two weeks and had to reinstall our ISA Server & almost all the network machines ( about 550 machines ).
Let me know if you want to speak about Confiker removal. PM me with your email or phone number and I will contact you on Monday or even before if you want.
Very important to beat confiker
1. Stop the Autorun from group policy
2. MS Windows update
3. up to date anti virus must be properly configure ( on access Read & Write) Scanning
4. Install File Server Resource Manager on your file server ( Block autorun.inf ) This will block all the USB which are carrying confiker to spread on the network
Last edited by apur32; 24th April 2010 at 12:58 AM.
24th April 2010, 05:22 AM #4
If the virus is still floating around on clients then your server AV could be restricting access to the server shares, had this with Symatec Endpoint Protection after they finally updated their defs to kill a new virus that showed up on our network.
24th April 2010, 05:38 AM #5
Did you assign the permissions on the profile folders manually? because windows doesn't like that, It likes it when it does it automatically.
If you can I would just scrape them and give them new profile folders and it recreate everything (unless you store documents in the profile and not a redirected directory).
As for the other shares, Make sure there is no rules preventing them in either NTFS or Share permissions (Deny always trumps a Allow* (Eg: Users=Deny and Student Security Group=Allow they will be denied)). And have you restarted the servers recently, I know conflickr likes to max out net connections which causes access issues.
*I believe there are certain circumstances that it doesn't work that way, but its the general rule.
By Mongoose in forum MIS Systems
Last Post: 27th March 2010, 09:58 AM
By mickeyh080 in forum Windows
Last Post: 15th October 2009, 06:36 PM
By marvin in forum Windows
Last Post: 15th September 2009, 05:21 PM
By Scruff in forum Windows Vista
Last Post: 18th June 2007, 12:02 AM
By Dos_Box in forum Windows
Last Post: 27th May 2006, 02:48 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)