Hi,
We have big problem since two days. We are infected on about 100 computers with virus that has same symptom that bugbear. Antivirus trend detect a problem (a .bat) but virus is active.
I think there is two viruses :
We see
- c:\windows\system32\update.2.exe not normal.
- c:\users\username\appdata\randomname\randomname.exe that is created all the time even if erased.
- We deleted all files, but later, files were again here.
- I don't find any informations about delete viruses easily, with patch ?? or script vbs ??
Anyone can help me ? Our servers are infected also, I think a computer with rights on c: is infected and copy files...
Can you help me ?