Lost Ability to Share Drives After Virus Removal

[sefoca]

I had a server become infected with one of the gaobot variants.

McAfee 7.0 detected and DELETED a bunch of files.

Now I cannot connect to shares on the server. Not even from the server
itself.

I can't see that any necessary services are not starting.

Does anyone have any suggestions on what I can do to get the shares back up
without doing a full re-install?

Thanks

 

[Steven L Umbach]

Run the netdiag support tool on it to see if it reports anything obvious and
look in Event Viewer for any clues. Sometimes viruses cause problems with
the IPO$ share. Try " net share IPO$ " at the command prompt to see if that
helps and/or uninstall and reinstall file and print sharing. If still a no
go try to uninstall and reinstall tcp/ip as shown in the link below which
assumes this is not a domain controller. Still no go? Try running System
File Checker as in sfc /scannow though if you are not using SP4 sfc may
delete hotfix files causing their need to be reinstalled. Of course take
steps to avoid viruses in the future again. --- Steve

http://support.microsoft.com/?id=285034
http://support.microsoft.com/default.aspx?scid=kb;en-us;222471
http://www.microsoft.com/technet/security/guidance/avdind_0.mspx -- the
most excellent Microsoft Antivirus in depth Guide.

 

[Steven L Umbach]

Yikes. I need glasses. Use the command IPC$. --- Steve