Storage Protector" virus on my server. Common removers don't seem to work

Fri, 25 Jan 2008 18:39:31 Z

I got one of those "Storage Protector" virus on my server, and can't seem to remove it. Can I boot off the CD and get access to the file system like that? Is there a recovery console? I don't want to erase my filesystem if I don't have to!

Storage Protector" virus on my server. Common removers don't seem to work

Fri, 25 Jan 2008 18:48:29 Z

Quite! No, you can't boot off the DVD and access the file system, and there is no recovery console, because you'd just reinstall - which is probably your quickest and easiest option. Reinstall will only affect the system partition (so you'll need to reinstall any add-ins and setup your users again, and redo backups if on a single-drive mahine) so all your data would be OK.

This is one of the reasons for not using WHS (or indeed any server) as a workstation.

Have you see this link?

Storage Protector" virus on my server. Common removers don't seem to work

Fri, 25 Jan 2008 19:02:24 Z

OK, My root disk is a 250gig, and I have a 500 and 750 gig drives in addition. I have lots of data and backups from several PC's. You are saying that I can reinstall the operating system here and not lose my data? I only have two users and have not really done much to customize the system, so that sounds reasonable. I was just readying about how the system uses the root disk for initial storage, then moves that data out to the other disks. If I Have more data thatn will fit on the larger two disks, and some of my data is on the root disk, is that at risk?

Thanks for taking the time with me today

Ron

Storage Protector" virus on my server. Common removers don't seem to work

Fri, 25 Jan 2008 19:14:56 Z

rstran wrote:

Ron

If you are using the Windows Home Server in a supported manner, your files will be safe during the Server Reinstallation. However, I ALWAYS back my stuff up before doing anything of this sort. You never know and when it comes to something as important as your data, backups are not a bad idea. Just remember to select Server Reinstallation and not New Installation.

From reading your post, it sounds like you are storing your data on your C drive and not in the shared folders, is that correct? You should not do that. During a Server Reinstallation, the C drive is completely erased. Your Shared Folders and computer backups are not because they are in your storage pool (D.

As for your first post, did you mention you had a virus on the server or that you install a program that you are calling a virus?

Storage Protector" virus on my server. Common removers don't seem to work

Fri, 25 Jan 2008 19:22:04 Z

"From reading your post, it sounds like you are storing your data on your C drive and not in the shared folders, is that correct? "

No, all my backup data is in the shared folders

I am not sure if I have an actual virus, or a rogue program. WHen I went to the server yesterday there were two incons on the desktop, one said "windows update". I clicked that, was not really paying attention, and installed a program called "Storagte Protector". When I got the message "Hundreds of errors werre found on yoru hard disk", I began to realize what I had done, but the damage had already occurred. I uninstalled the software, but it (or something) conitnues to load, create thousands of temporary files in my root and documents folders, and makes my disk thrash about.

I ran a spybot S&D, and installed clamwin, but I think these software are no match for uninstalling the rogue, I don;t think. Things are not running properly now, the console won't load. In the course of things, the "Run" was removed fomr my start menu, I could not run regedit, etc, without undoing things in the registry and managmeent console first

Storage Protector" virus on my server. Common removers don't seem to work

Fri, 25 Jan 2008 19:24:22 Z

Yep, sounds like you do need to do the Server Reinstallation. You should be installing program from the Windows Home Server desktop but through the add-ins folder and through the console.

Storage Protector" virus on my server. Common removers don't seem to work

Fri, 25 Jan 2008 20:00:44 Z

Make that "You should not be installing program from the Windows Home Server desktop but through the add-ins folder [in the \\server\software share] and through the console"

You should only RDP into WHS if you need to do something very specific that is not possible through the console.

Storage Protector" virus on my server. Common removers don't seem to work

Fri, 25 Jan 2008 20:50:41 Z

OK, I am going to reinstall. Insert the DVD, begin, realize that it recognizes only the first two IDE disks, but does not recognoze the 750gb SATA disk. Try to install the drivers that came with the (older) motherboard, it does not recognize those drivers. I now realize that I added this 3rd disk after the system was set up. I guess the WHS downloaded the drivers online, then saw the idisk, and inegrated it with the rest of the system.

What to you think is the best way for me to reinstall now? I don't see drivers online anywhere

Storage Protector" virus on my server. Common removers don't seem to work

Fri, 25 Jan 2008 20:55:34 Z

You will need to find the SATA controller drivers...

Storage Protector" virus on my server. Common removers don't seem to work

Thu, 14 Feb 2008 10:13:40 Z

You posted this on January 25th? Spybot have since made a new program (released on January 29th) which I have used. It gets rid of the virus, and you can then delete those annoying shortcuts, and they wont come back. They didn't for me, anyway. I don't know if I opened it as you did, but try the new version of Spybot S&D. I think it is version 1.5.2, you can download it for free on various websites. Give it a go if you haven't already got rid of the virus...