Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works

Server cleanup after W32.Changeup!gen41

  • Please log in to reply



    New Member

  • Member
  • Pip
  • 1 posts
Hello - looking for some (registry) guidance here.

Win SVR2003: A compromised XP client PC was infected with W31.Changeup!gen41, which propogated to a
Windows2003 Server. The client PC has been taken offline. The server has latest Symantec Virus defs and a full scan
resulted clean. OTB scan resulted clean.

The virus has set many shared folders to Hidden/Read-Only, and created .exe "clones" of the folders.
I have deleted the clones, but I cannot reset the original folders to visible through the UI.
They remain hidden and read-only.

I need advise as to best procedure to reset these folders.

I do have a clean offline backup of most folders&files,
but I would prefer to not have to re-populate the entire lbrary.

Thanks in advance for your answers!
  • 0


Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP