network scanner tool after virus

[sharpie]

I have had two clients in the last week that had a computer on the network get hit by a cryptolocker virus through email. The infected computer was removed from the network, however the next day two of the computers at one location would not run the network scanner tool. I successfully reinstalled the sharpdesk on two desktops and a third desktop never had a problem. When they started the computers in the morning, network scanner tool would not initialize and from that point it won't install on the two machines, the third computer is still working.

The other customer has an XP machine that has been infested by something so they purchased a new Win8 machine which I installed sharpdesk successfully, however two days later the computer will not initialize scanner tool, I uninstalled and reinstalled and it will not initialize. Does anyone know whats up with this......... infection??

[faxman28]

Re: network scanner tool after virus

I have had two clients in the last week that had a computer on the network get hit by a cryptolocker virus through email. The infected computer was removed from the network, however the next day two of the computers at one location would not run the network scanner tool. I successfully reinstalled the sharpdesk on two desktops and a third desktop never had a problem. When they started the computers in the morning, network scanner tool would not initialize and from that point it won't install on the two machines, the third computer is still working.

The other customer has an XP machine that has been infested by something so they purchased a new Win8 machine which I installed sharpdesk successfully, however two days later the computer will not initialize scanner tool, I uninstalled and reinstalled and it will not initialize. Does anyone know whats up with this......... infection??

might be antivirus/firewall suite blocking net scan tool, go to cmd, type in telnet(if telnet is turned on) ip address of pc (space) 4687(default port for NST) if NST is not blocked you should see 220 Sharp Network Scanner Tool FTP server. or just turn off firewall and see if you can scan. Also check and make sure SNMP is turned on, If I remember correctly NST uses SNMP to talk to copier( send ip address and button info).

[sharpie]

Re: network scanner tool after virus

The application is not being blocked, it fails to initalize at installation on 2 PC's that have been running the NST for some time now, and only after a computer on the same network (this is a 5 PC network) had a virus and was taken off the network. The 2 PC's exihibit no other symptoms and have been checked by their network admin. company. A third PC on the same network has no problems and is still running NST. We are scanning to a network folder on each of the 2 PC's now, I am wondering if anyone has had this issue and knows what was affected in Windows to cause this issue.

[ubmchrisb]

Re: network scanner tool after virus

If you really want to fix the issue, you could try monitoring the Network Scan Tool and FTP Server using process monitor. https://technet.microsoft.com/en-us/.../bb896645.aspx

Chances are that the machines are infected, or file/registry permissions are bad.

On a Windows 7 machine you could look at C:\ProgramData\Sharp\NST\3.2\FTPLogger.txt, not sure where it's located on XP/2k3.

Otherwise it's reformat/reinstall.

[faxman28]

Re: network scanner tool after virus

If you really want to fix the issue, you could try monitoring the Network Scan Tool and FTP Server using process monitor. https://technet.microsoft.com/en-us/.../bb896645.aspx

Chances are that the machines are infected, or file/registry permissions are bad.

On a Windows 7 machine you could look at C:\ProgramData\Sharp\NST\3.2\FTPLogger.txt, not sure where it's located on XP/2k3.

Otherwise it's reformat/reinstall.

Depending on the message you get when NST is trying to start , and how comfortable you are with Regedit (win registry editor) uninstall Sharp Desk / NST, then startup regedit and search for NST, Network Scanner Tool, Sharpdesk and Sharp(items that deal with sharpdesk) and delete them from the registry. I have had this work a few times, if it doesn't work then there could be other files in the Win OS that are corrupted. then windows would need to be wiped from the pc and reinstalled. I have had some pc that sharpdesk would not work on. The pc manufacturers do customize windows (bloatware) thats why if you have an issue with windows microsoft will tell you to contact the pc vendor for support.

[sharpie]

Re: network scanner tool after virus

Thanks for the info, I am heading that way again tomorrow. They are having a third party look at their computers to check for the infection. The win8 machine loaded right up and worked fine until the second or third restart.

[Akitu]

Re: network scanner tool after virus

Is there a particular reason why you're using Sharpdesk? 99% of all functions hosted through Sharpdesk can be performed by the machine without the unnecessary shell that is Sharpdesk. The sole exception is the OCR, in which case there are a variety of alternatives out there.