Guys, basically, this is my problem. I have this machince which is needed to run for other servers to be connect to a remote printer in ASIA. The problem comes when it keeps on not being accessible to the network. My users are all using Citrix to access this server. I have ran many scans with updated Defs and everything from tracing Virii to Spywares. The only clue i am left with is that a file named”conime” keeps running as a process. Also, it is labeled as a major security threat as a backdoor. What i am afraid is that it is a Citrix process that other programs may have blacklisted because of the impersonation made by BFGhost1.0 Can anyone confirm with my finds?
Apart from that, can i ask if anyone knows whether if anyone connect to a machine, a seperate process of the program is run for him? As in if i have 10 Users logged in my system then i will have around 10 “WINLOGON” running? Thank you for your responses.
Any help is appreciated.
-Xyber.