I have several problems on my network that I believe stem from a virus. First and formost, Shared or network printers constantly print out random charaters. This I know is a virus trying to copy itself the the printer share (thinking it is a normal share). The other problem is computers sutting down with a RPC call after the lsass.exe crashes.
The machines have all been properly patched (long ago, to prevent these specific vulnerabilities, specifically the LSASS vulnerability). I have scanned the computers with the NAV Corporate edition, which was running and updated before this happened, as well as online scanners, trendmicro and Panda. I have even removed a HD and scanned it as a Secondary HD on another computer. The computers that shutdown with the LSASS problem do not show any viruses whatsoever. I have checked the registry manually for stray services, there are no unwanted processes runing on the computers either.
The viruses that have been stopped on the network recently are Gaobat and SDBOT.
Does anyone have any ideas?
