Hi,
I have a strange problem. But I want to declare this before going furtheron.
My customer bought a server from me, but did not want any virus protection on it, because he did not surf on the server. I told him that the server has access to the internet because it needs to download updates etc.
Last week I found out that my MMC's where failing (all), the server was slow. After a quick scan I found out that Sality.Z was the problem. After that I installed the removal tool and ran it. It removed about 2000 instances in about 5 reboots.
There is one whick cannot or does not get cleaned: ctfmon.exe. How? I don't know.
Also, the MMC's are still not working. It ends up with some strange characters which do not fit in proper english: GBx...
The X is rotated and more of that.
The problem are:
1) How to get rid of the Virus (final removal)
2) How to get the MMC's back.
Regards
Rob Litjens