Dear Prachand,
I would like to clarify that your mibling virus writeup and removal does not apply to windows 2003 server. I have the same case here in which all of my DOC files have been compromised, and right now they just do not exist, but in the form of an executable file, which cannot be deleted by endpoint, for then I would forever lose my original file contents.
None of the registry keys that symantec mentions in the virus writeup and removal show up on my 2k3 server, therefore, I cannot use them to try to remove the virus from my system.
I'm in panic right now. 5 years of historic data are, apparently, gone.
Please help.
Cheers,
hexadatos.
p.s. a new customer! they called after the outburst. we sold them endpoint because we thought it would solve the issue, and now we have come to a stale.