Possible virus on servers.

[petrosky]

Hi,

I have an interesting problem. When I attempt to map a network drive to our server here I receive the ominous error.

"Windows cannot find '.\readme.txt.exe'. Make sure you typed the name correctly, and then try again. To search for a file, click the start button, and then click search."

I am currently running online virus scans on the server, but wondered if anyone had seen this in the past.

It should be noted that we are running Symantec Corporate Edition 10 on the server and workstations.

Peter.

Remember- It's nice to be important,
but it's important to be nice

 

[electronicsfreak]

My first thing would be do an actual search for the file with all files showing(hidden and subfolders, etc..) . Also id empty out all temp locations. Might want to do a search in the registry for it and see what it points to. Ive never heard of this before but I looked it up and discovered it is a trojan/worm. This site may be useful for you

http://ca.com/us/securityadvisor/virusinfo/virus.aspx?id=42624

There is a point in wisdom and knowledge that when you reach it, you exceed what is considered possible - Jason Schoon

 

[petrosky]

Hi electronicsfreak,

Thanks for your advice. It turns out that Autorun.inf files pointing to a non-existent Readme.txt.exe in the root of the shares in question were the problem.

It is as though Symantec has quarantined/deleted the virus but left the .inf files.

Peter.

Remember- It's nice to be important,
but it's important to be nice