variant of MSIL/Injector.FWX

[elscomm 0]

Hi All,

 

I have an end user who opened photo.exe received via email. Infected the server. Server froze. Reboot fine but once you try and log back into as a user it freezes within seconds and olny reboot will fix issue. If users do not log in server OK. Can reboot server in Safe Mode with Networking. System was infected about an hour before there was a detection from ESET. Ran full ESET scan and removed all but one. Still having same issue.

 

What to do?   

 

Rene

[Marcos 5,070]

Do you mean that a user received and ran photo.exe on a workstation and subsequently it infected the server as well? Or is it a terminal server?