08-19-2008
1,420,
6
Join Date: Nov 2006
Last Activity: 17 November 2016, 5:32 AM EST
Location: Bulgaria
Posts: 1,420
Thanks Given: 0
Thanked 6 Times in 6 Posts
Possible solution : unmap the network drive, and check the router logs for unsuccessful TCP connections to the data server, but you gotta have network admin with you. Else, you may look recursively in the logs folder, for example : grep -ir "ctfmon.exe" /var/log/*
This will search for any lines with ctfmon.exe string in, and hopefully you will be alarmed with the IP address of the user. On the other hand, have everyone in your office to scan their PCs for viruses and eventually clean them up.