Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 7038 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Virus/spyware Not cleanable

vospersIT

Good morning all.

this morning when i came in i found a virus alert in the SEC that is looking at a \\.\GLOBALROOT\Device\harddiskvolumeshadowcopy258\tempc\program files (x86)\common files\cubeware\NV_o2o_Teilnehmer.exe and NV_o2o_Participant_EN.exe

i cant seam to get at the files to sort this out as the SEC says they are not cleanable. any ideas chaps.

kurt.



This thread was automatically locked due to age.
  • 0

    Hello Kurt,

    the location in the file system should be C:\program files (x86)\.... What has been detected? Cleanup isn't available on the \\.\GLOBALROOT\ path, if there's actually a threat a (perhaps full system) scan will detect in the regular file system (from where it can be cleaned up in the usual way).

    Christian

  • 0
    it was the two .exe files above but they seam to have vanished now ?? first thing i did on the server was run a AV scan witch turned up nothing came back all clean. turns out we have bigger problems with it. its riddled with malware the sophos has not picked up ?? found it all with malware bytes im now in talks with support as it should have picked up this lot. we changed to sophos just after we had this same malware last time.
Unfiltered HTML