On some of our XP Pro workstations (still in an NT4 domain) we are losing the
Administrative shares, C$ and Admin$. I can open the remote managememt
console on the machines and look at the shares (above two are missing), but I
cannot access the hard drive. However, this problem is temporary - the
shares will reappear if we shut down the computer and then restart it (cold
boot). I know this is not normal and I am wondering if there is a virus,
worm or trojan that is causing this. The computers in question were not
being patched to current levels because of a problem with an old application
(old application is in the process of being replaced) - we had to uninstall
KB828741, and stop all future patching. The users in question also have
local admin rights.
Does anyone have any idea what is going on and how we can prevent it?
|