On Mon, Oct 27, 2014 at 6:55 PM, John Abreau <[email protected]> wrote:
> The samba logs should show you which clients are creating those files, so
> the users will know they need to disinfect their machines.

Thanks to the auto-run, likely every windows machine using this SAMBA
share needs to be disinfected by now.

Agree with read-only suggestions to keep it from spreading while you
exterminate the client infections.

Agree with Clam (or a windows AV) to find out what it is and how to
remove it from windows primary disk. (It's won't be auto file on
client c:)


-- 
Bill Ricker
[email protected]
https://www.linkedin.com/in/n1vux
_______________________________________________
Discuss mailing list
[email protected]
http://lists.blu.org/mailman/listinfo/discuss

Reply via email to