Despite my best protection efforts, the my.doom worm got into our system. However, everything I've read says that it propogates bogus infected e-mails, not destroy files. About the same time the worm was detected, all .xls and .doc files were removed from my several subdirectories on my server, leaving 1 or 2 bogus files with a .zip extension and 35 byte size in their place. Other subdirectories were not touched. My anti-virus software identified my.doom, and shows that the .zip files are infected, but does not say with what. Whatever it is hit at 11:40 am yesterday, and even wrote the infected files to the tape that was still in the tape drive. I have deleted all the infected .zip files, run a successful, clean virus scan, but I'm still at a total loss as to what happened, and am scared to death that it will happen again! Does anyone have any ideas??? Thanks in advance...
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
my.doom worm infection - missing files?
- Thread starter newatit
- Start date
bigpapapump
IS-IT--Management
It's the mydoom.f variant and you have it. Run the removal tool that symantec provides and restore those files from tape. Update your virus definition files also.
- Status
Similar threads
- Locked
- Question