Error 12294

[mikes88]

Hello,

I've come across an error on my DC that is stating the following:

Log Name:      System
Source:        Microsoft-Windows-Directory-Services-SAM
Date:          6/27/2012 9:30:38 AM
Event ID:      12294
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      [COLOR=red]servername.domain.com (This is not the real domain)[/color]
Description:
The SAM database was unable to lockout the account of astaro due to a resource error, such as a hard disk write failure (the specific error code is in the error data) . Accounts are locked after a certain number of bad passwords are provided so please consider resetting the password of the account mentioned above.

Now i looked on microsoft and they say that this could be caused by:

This issue may occur when a computer on your network is infected with the W32.Randex.F worm or with a variant of it.

The question is how do i confirm that this is in fact a worm/virus on the server or system?
Are there files within Windows that i should check to see if they are indeed infected?

 

[mikes88]

Error is occuring roughly every hour and 20-30 minutes