Recently our local network and server was attacked by malicious programs. The damage is up to a point wherein important files and folders gone missing, slowdown in network and system performance. I really need a good insight on how to deal with this dillema. Which should we clean first server or workstations? and considering the downtime of business operations what method of cleaning is best? total wipeout of storage or just plain scanning of AV’s. I already tried the latter but since the damage is already there (eg. slow performance etc.) I am not comfortable with it. If someone can point me to the right direction I would really appreciate it…thanks!
