nania
2008-01-10, 15:07
I recently discovered this after a badly infected machine on the same network was pulled out of service. The infected box had read only access to a file share on the Dual P3 server. The server is running W2K3sp2 and IE7 5730.13 and no has no additional security updates. I took the infected box out of service when I discovered that wmsyspr9.sys had wormed its way onto the server %windir%. I removed the wmsyspr9.prx from the server and the scans looked clean but the server was running a little slow so I started poking around and discovered that the .dat files now had this curious file type designation. I tried to change it in my "tools:folder options: file type" but the edits are ignored. I have some scan logs ready to post but I thought there might be a less intensive remedy :)
Please feel free to move this thread.
Please feel free to move this thread.