Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Server cleanup after W32.Changeup!gen41

Started by RTC-NASSAU , Jun 25 2013 08:13 AM

Please log in to reply

#1
RTC-NASSAU

Posted 25 June 2013 - 08:13 AM

New Member

Member
1 posts

Hello - looking for some (registry) guidance here.

Win SVR2003: A compromised XP client PC was infected with W31.Changeup!gen41, which propogated to a
Windows2003 Server. The client PC has been taken offline. The server has latest Symantec Virus defs and a full scan
resulted clean. OTB scan resulted clean.

The virus has set many shared folders to Hidden/Read-Only, and created .exe "clones" of the folders.
I have deleted the clones, but I cannot reset the original folders to visible through the UI.
They remain hidden and read-only.

I need advise as to best procedure to reset these folders.

I do have a clean offline backup of most folders&files,
but I would prefer to not have to re-populate the entire lbrary.

Thanks in advance for your answers!