Shares disappear

[nathan.hemmings(remove)]

Hi All,

I am having a problem with a number of Windows 2000 Pro SP4 PC's on my
network losing their shared directories. When I check the Shares in
Computer Management, all the default shares (C$, IPC$ and ADMIN$) have
disappeared too. I am also unable to share any directories: if I right
click on a directory there is no sharing option, there is no Sharing tab
if select Properties.

I have found that reinstalling File and Printer Sharing for Microsoft
Networks and rebooting the PC brings the shares back and I can share
directories again. This is only temporary though. A day or two later the
shares have fallen off again.

I have checked the event logs, to no avail. I have also made sure that
the Server service is still running. Is anyone else having this problem?
Does anyone know of a solution?

Any help with this would be greatly appreciated.

Regards,
Nathan

 

[Nathan Hemmings]

Not to worry, I found out what was causing the problem. The SDBOT
worm had left behind a hidden IRC client.

The exe's used are called WUPDATED.EXE and/or WUPDATER.EXE. The exe's
install themselves as a service called Windows Update Service.

It does things like send out your Windows Product Key and system
information. It also disables shares on the local PC.