Help to remove Mabezat and its variants from my office network

[sribashyam]

Hello!!

I am using an IBM server, loaded with Windows Server 2003. This is connected to about 15 nodes in my office all on Win XP Pro SP2. Recently, i found a virus called Mabezat in one of the client terminals and now it has been noticed in my server also.

After all the research on the internet about the removal tools, i downloaded a Kaspersky removal tool for this virus, which detected and deleted some files and also disinfected some. But I still do not feel assured about how clean my client pc's are now after the removal tool is used.

Another problem is I want to know how to remove the virus worm from Server. Please help.

Thanks in advance,
Sribashyam.

 

[tashi]

Hello sribashyam,

Hello!!
I am using an IBM server, loaded with Windows Server 2003. This is connected to about 15 nodes in my office all on Win XP Pro SP2. Recently, i found a virus called Mabezat in one of the client terminals and now it has been noticed in my server also.

Please see this post in the FAQ: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)

Note:
When the infected computer in question is a company machine in the workplace, or you are an employee.


The intention of this forum is not to replace a company's IT department, nor can we anticipate alterations or configurations that may have been made to a business machine, or how it will interact with the tools commonly used in the removal of malware.

The majority of the tools used in this forum are only free for Home Users and only tested on Home machines, they may well change settings that are required for a Company network. Another consideration is that company information may show in the logs.

More than one machine could be at stake, possibly even the server. If sensitive material has been compromised by an infection, the company could be held liable.

To prevent any possible loss or corruption of company information, please inform your IT Professional or Supervisor when a workplace computer has been infected, immediately.

It's not that we don't want to help, but there are too many issues that could arise from a networked company machine that malware forum volunteers are not experienced in dealing with.

Thank you for your understanding.
--------------------------------------------
As Malware removal forum volunteers are unable to assist users with infected Corporate, Government, Small Business or Institutional machines, please contact our office support so they may provide direct assistance for your needs. Thank you.

Spybot S&D Corporate-Small Business Editions
For more information, please send an email to licenses(at)spybot.info

Personal computers or.....

Best regards.