NetworkDistribution Virus has effected our network in location of "C:\Windows\NetworkDistribution\". The fact is sophos endpoint can clean those virus in given location. But after restart computer it show's again. When we re-setup computer and deploy sophos end point it solves the problem. But We have almost 1000 computers are still affected by that virus.
I think it was attacked by shadowbroker (https://github.com/misterch0c/shadowbroker).
Do you have any solution to recover that solution. I have tried (https://www.trendmicro.ae/vinfo/nz/threat-encyclopedia/malware/trojan.win32.vools.ag) that one but i failed.
Please we need your help.
This thread was automatically locked due to age.
