What virus is this?

Viruses and worms
1

we are facing a big problem, any virus scanner couldn’t find that. we have tried panda, nortom, eScan, mcCaffee, AntiVir and so on. now we have tried EZ Antivirus. this one also cann’t find that.

our problem is
we are a small 10 member developement team. we are using vb, vb.net, sql server 7.0, sql server 2000.

in sql sometimes some tables are automatically dropped, sometimes database is getting dropped, sometimes tables getting truncated, sometimes values are getting changed, sometimes sql server is getting stoped in all systems at the same time.

sometimes so much files and folders are getting deleted, sometimes .vbp files are getting deleted, sometimes it deletes only working files, sometimes it leaves working files and deletes all from that drive.

at the same time as i said that we are a developement team, we distribute our software to more than 50 clients, our clients are not facing this problem, thank god for that, it hapens only in our office.

we have asked about this to my friends, but they said “some one is doing physically”, pls understand it not done by person really

can u help us, pls

2

have you dismissed and employee lately??

3

no

4

Sorry I am at a loss it really looks to me like someone external to you company has access to your system

5

but no one is doing that, i am sure.

6

You could try running another online scanner Trend Micro is a very good one

Trend Micro House Call

7

i have already tried this one, no use

8

Sorry crameshcbe I am at a loss some other members may offer some other advice

Have you run any rootkit revealing software?

Rootkit Revealer

9

Hi crameshcbe,

Always keep a backup of the original corrupted file.
The best way is to keep your code under version control, look for a tool like SGL Compare at http://www.red-gate.com and download and run this:
http://securityresponse.symantec.com/avcenter/venc/data/w32.sqlexp.worm.removal.tool.html

greets,

polonus