you should restart the computer in safe mode and do the scan. Have you tried with MSRT http://support.microsoft.com/kb/890830http://www.arabitpro.com

Hello, Please proceed like that: Isolate the serverPerform a full scan on all of its drivesRun sfc /scannow Once done, you can let it back but avoid logging on using an administrator account. Also, perform a full scan on all computers / servers on your network especially file servers. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator Microsoft Certified Trainer

Have you tried, Malwarebytes Antimalware ? It works very well on Server OS as well and can clean up malicious objects. Also, Disable File and Print sharing on the affected Server for time being in that way, you can restrict malware from infecting other machines in the network.If it looks good, Eat it ! Likewise, If you don't know the answers, don't hesitate to ask questions !! This posting is provided "AS IS" with no warranties or guarantees and confers no rights. About Me !!!

Facing issues on one our Windows 2008 servers for the last few days. Shorcuts of the exe files are being created in both the data drive as well as system drive and folders have been hidden. Shorcut of recycle bin is also created in the root drive. Have tried Forefront,Mcafe and the antimalware tools but still giving issues.Any help will be appreciated

you should restart the computer in safe mode and do the scan. Have you tried with MSRT http://support.microsoft.com/kb/890830http://www.arabitpro.com

I think you actually need to boot your server from bootable media, such a rescue disks from Symantec or any other vendor. Then run stand alone AV tools Regards Herbert Zimbizi

Hello, Please proceed like that: Isolate the serverPerform a full scan on all of its drivesRun sfc /scannow Once done, you can let it back but avoid logging on using an administrator account. Also, perform a full scan on all computers / servers on your network especially file servers. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator Microsoft Certified Trainer

Have you tried, Malwarebytes Antimalware ? It works very well on Server OS as well and can clean up malicious objects. Also, Disable File and Print sharing on the affected Server for time being in that way, you can restrict malware from infecting other machines in the network.If it looks good, Eat it ! Likewise, If you don't know the answers, don't hesitate to ask questions !! This posting is provided "AS IS" with no warranties or guarantees and confers no rights. About Me !!!

Have you check the antivirus up to date. Try the MSRT tool. Try to download this tool and run on the server. Thanks

Hello, I would also like to suggest you visit the Microsoft Virus Solution and Security Center for resources and tools to clean the server. And if you are in US or Canada, you can call 1-866-PC-safety for free support. Thanks Zhang

Thanks for all ur help...We found that the shorcut folders wre created by virus on users machines .. We found the creator by right click on the shorcuts.,and removed these machines from the network. Now the server is free from virus..

Thanks for all ur help...We found that the shorcut folders wre created by virus on users machines .. We found the creator by right click on the shorcuts.,and removed these machines from the network. Now the server is free from virus..