→ The Lansweeper Customer Excellence Awards 2024 - Submit Your Project Now! Learn More & Enter Here

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Taylor_Pilewski
Engaged Sweeper
I'm looking for the following files.

svchosts.exe
taskmon.exe
rundll.exe
service.exe
sound.exe
upnpsvc.exe
lsas.exe
logon.exe
helper.exe
event.exe
dumpreport.exe
msiexeca.exe

They are all located in c:\documents and settings\username\application data

Would this be how I add them to the LS GUI? (attached picture)

I would then need to run a report on the files located.
4 REPLIES 4
Hemoco
Lansweeper Alumni
You can't use %documents and settings% you need to use c:\documents and settings\

Maybe it would be better to look at which registry keys are added by the virus.
Maybe you only need to find one HKEY_LOCAL_MACHINE key.
Taylor_Pilewski
Engaged Sweeper
These are files associated with a nasty virus that is propagating my network right now, so any help I could get on this would be greatly appreciated.

Thanks fellas.
Taylor_Pilewski
Engaged Sweeper
Ok,

I've changed it to All Users because that's where the files can reside.

Does this look ok?

If so how do I make a report out of this?
Hemoco
Lansweeper Alumni
You will need to specify the real username instead of "username"

There is no parameter for this because most lileky there are multiple profiles for different users on each computer.