+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 23
Windows Thread, Weird drive mapping issue in Technical; Hi there, we are experiencing a strange drive mapping issue that a) random and b) happens to existing and new ...
  1. #1
    bodminman's Avatar
    Join Date
    Apr 2007
    Location
    Sunny Suffolk
    Posts
    1,209
    Thank Post
    790
    Thanked 232 Times in 123 Posts
    Blog Entries
    1
    Rep Power
    91

    Weird drive mapping issue

    Hi there,

    we are experiencing a strange drive mapping issue that a) random and b) happens to existing and new users.

    Basically from the image you can see that the mappings are made but appeaqr to be losing there association to 'Explore'. You can do start / run and unc to the destinations no problem.

    This issue is effecting random users and happens all the time to them.

    Any ideas?

    ThanksDrive_Mapping_Issue.jpg

  2. #2
    bodminman's Avatar
    Join Date
    Apr 2007
    Location
    Sunny Suffolk
    Posts
    1,209
    Thank Post
    790
    Thanked 232 Times in 123 Posts
    Blog Entries
    1
    Rep Power
    91
    Hi there,

    right we have run Malwarebytes and Kaspersky Virus Removal Tool across the 2 DCs and NAS and despite both products detecting and removing items, we're still getting the issue.

    My account was new as of last week and I get the weird issue. After the scans the servers were restarted and my profile was reset and the local profile was removed from the workstation.?

    Any other avenues we should be looking at

    Thanks

  3. #3

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,683
    Thank Post
    755
    Thanked 1,715 Times in 1,526 Posts
    Rep Power
    438
    You forgot to blank out the details on the left.

    Ben

  4. #4
    bodminman's Avatar
    Join Date
    Apr 2007
    Location
    Sunny Suffolk
    Posts
    1,209
    Thank Post
    790
    Thanked 232 Times in 123 Posts
    Blog Entries
    1
    Rep Power
    91
    Cheers, I take it I can't replace the bugger either!?!

  5. #5
    steve's Avatar
    Join Date
    Oct 2005
    Location
    West Yorkshire
    Posts
    1,047
    Thank Post
    22
    Thanked 178 Times in 124 Posts
    Rep Power
    53
    Have you tried the command prompt on the workstation?

    How are the drives mapped? Login script, group policy, local mapping, rm software?

    I'd try clearing the mappings "net use /del *" and re-mapping manually.

  6. #6
    bodminman's Avatar
    Join Date
    Apr 2007
    Location
    Sunny Suffolk
    Posts
    1,209
    Thank Post
    790
    Thanked 232 Times in 123 Posts
    Blog Entries
    1
    Rep Power
    91
    It's an RM CC3 job.

    Logged into the same OC as SystemAdmin the drive mappings all work fine.

  7. #7

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,819
    Thank Post
    881
    Thanked 685 Times in 454 Posts
    Rep Power
    505
    Is there a rouge Autorun.inf in the root of these drives?

  8. #8
    bodminman's Avatar
    Join Date
    Apr 2007
    Location
    Sunny Suffolk
    Posts
    1,209
    Thank Post
    790
    Thanked 232 Times in 123 Posts
    Blog Entries
    1
    Rep Power
    91
    Quote Originally Posted by Gatt View Post
    Is there a rouge Autorun.inf in the root of these drives?
    There were and Kaspersky picked them up and removed them. Also it picked up something called downloadme.vbs which contained some dodgy stuff!
    Last edited by bodminman; 17th May 2011 at 10:30 PM.

  9. #9
    AXE
    AXE is offline
    AXE's Avatar
    Join Date
    Dec 2008
    Location
    Right here. Right Now.
    Posts
    201
    Thank Post
    188
    Thanked 57 Times in 20 Posts
    Rep Power
    23
    AutoRun.inf eh?
    Often, modifications are made to the entries in the registry:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\MountPoints2
    Particularly if your drives start losing their standard icons, actions etc.

    Have you tried resetting the profile of the affected user?

  10. #10
    bodminman's Avatar
    Join Date
    Apr 2007
    Location
    Sunny Suffolk
    Posts
    1,209
    Thank Post
    790
    Thanked 232 Times in 123 Posts
    Blog Entries
    1
    Rep Power
    91
    Quote Originally Posted by AXE View Post
    AutoRun.inf eh?
    Often, modifications are made to the entries in the registry:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\MountPoints2
    Particularly if your drives start losing their standard icons, actions etc.

    Have you tried resetting the profile of the affected user?
    My user profile was reset immediately after the servers were restarted after the Kaspersky scans but the problem still appeared.

  11. #11
    po_jo_45's Avatar
    Join Date
    Jul 2011
    Location
    London
    Posts
    14
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Im having the exact same problem, were you able to get this working?

    I suspect the autorun.inf virus but scanned the server and there is nothing detected

  12. #12
    po_jo_45's Avatar
    Join Date
    Jul 2011
    Location
    London
    Posts
    14
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    As i suspected its the autorun.inf virus, however RMVP4 does not pick the virus up (what crap!), I am having to clean the server using Sophos, but now have issues with local profiles. Hard work but its gotta be done

  13. #13

    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,842
    Thank Post
    219
    Thanked 271 Times in 219 Posts
    Rep Power
    69
    why not add a software restriction policy on the mapped drive.

  14. #14

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,342
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    This is a typical example why on every network I support, I enable:

    User Config > Admin Templates > System - Turn off Autoplay (All drives)

    It makes it impossible for the virus to spread anymore and only requires a user to open up My Computer manually.

    One school I support had the Conflicker virus (autorun virus) before I started and although the virus was removed, it still created a lot of damage. I ended up re-installing the one server from new and the problems then disappeared.

  15. #15
    po_jo_45's Avatar
    Join Date
    Jul 2011
    Location
    London
    Posts
    14
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    What happens when autorun is disabled but the users double click the drive in My Computer - does it not do the same thing, the virus will still get onto the computer etc?



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Weird issue - home drives not mapping
    By chrisjako in forum Windows Server 2008
    Replies: 4
    Last Post: 15th September 2010, 10:01 AM
  2. Mapping a network drive issue...
    By Rawns in forum Windows
    Replies: 0
    Last Post: 10th May 2010, 04:41 PM
  3. Macs drive mapping
    By fil_b in forum Mac
    Replies: 19
    Last Post: 18th December 2009, 12:15 PM
  4. Mapping H Drive
    By LeonieCol in forum Wireless Networks
    Replies: 5
    Last Post: 20th May 2009, 01:35 PM
  5. CC3 - how is drive mapping actually done?
    By Nozza in forum Network and Classroom Management
    Replies: 18
    Last Post: 7th April 2009, 05:26 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •