XYplorer Beta Club

Hey guys,

There is a virus on our network server that can't be removed with anti-virus software. It affects the server's network shares such that when a workstation maps the network drive, it shows a lot of garbage/virus laden files that look like shortcuts. When viewing these drives with windows explorer, the real content is not visible.

The workstation software that uses these mapped drives for parameters and such, still recognizes the real content, and is able to access it normally.

Only programs like winrar, and Xyplorer are able to show the real content of the mapped network drives. The virus/garbage files are visible as well.

Antivirus software can't seem to remove any of this, we have scanned and cleaned multiple times, with apps like combofix, hijackthis, etc.

I need help to get this sucker out of the system. Its a nasty one.

Obscure but niche-like solution can be found at http://www.greatis.com under the name of Reanimator. It cleans and reports - at least did in the past... they are updating their software suite moving some features to a dependency relation with newer product, Warrior. Try to look also after UnHackMe - I believe you can run it under the 30 day trial limit of their main app, RegRun Suite Platinum.
Hope this helps.
Will try to remember any other stuff which may be useful. Once I stumbled upon such crapware in the past and know the feeling very well...
Wish you luck.