Citrix Spyware Solution?

[Chambers]

So I found out today that all of my Citrix Server somehow got spyware on them! Any of you come across this? How did you handle it? What's the best software for Metaframe Servers? I never thought Citrix could get spyware?

 

[Chambers]

Any suggestions? I'm going to be doing some house cleaning tomorrow.

 

[bluewhaleCA]

AFAIK any windows PC can get malware. Other OS's less so, perhaps because they don't use activeX, but that's a religous arguement for another place and time. I would suggest running spybot and ad-aware in safe mode after updating their definitions. And I've heard ( haven't seen yet ) that some malware will install in that single user's context only, so you would have to log in and run the antispyware apps as each user... perhaps.

 

[Chambers]

Guess it wasn't as hard as I thought it would be. Logged into the Server in Safe mode, deleted the bad directories, ran hyjackthis, got rid of some bad entries, rebooted Server, back to normal

 

[bluewhaleCA]

Good deal. I've seen three or four where the malware is aware of your attempts to remove it even in safe mode. Great fun if you have the time to track them down. <BG>

 

[AKPolarBear]

We use Trend's Server Protect product and have no issues with Citrix.

Just this week I went to a website that immediately tried to download two viruses while in my Citrix session.

They were caught and deleted before I even new about it.

 

[KevinSwe]

Had this happen recently and it was a pain to gt rid of.

The spyware kept jumping around between two users so I had everybody shut down their thin clients/PC's for the night to prevent any memory resident stuff. Disconnected the server from the network and ran the following -- repeatedly.

Here's how:
Run A/V software
Run Anti-spyware (Ad-Aware or Spybot)Although Ad-aware found over two hundred items more.
You will get a message showing you where the spyware is located. Sometimes you have to turn on 'show system files'.
Safely delete the items mentioned.

Hope this helps,
Kevin