gaelicum.a virus

[rharris118]

Hi my network of 2 windows 8.1 desktops and my 4tb seagate central nas seem to be covered in the gaelicum.a virus according to avg. I seem to have just about sorted the pc's (but they keep being infected again. I'm assuming by the nas) but I can't remove it from the nas. I've scanned it over and over but it keeps coming back. There's about 2tb of software, films, music and documents on there. I've had to delete just about everything that was an .exe as it had infected them all and avg repairing them just made them tiny files.
does anyone have any ideas?

 

[rharris118]

try scanning it with malwarebytes, I find this is normally quite good at removing stuff.

not too sure if it can scan a nas drive but if you have a network drive on the PC to the nas it should be able to scan it

Tried that. No can do. I have mapped drives to the nas but they don't show up in malware bytes.

So you think kaspersky will be better at sorting this infection, and dealing with the nas too? There's about 1gb of my partners uni work on there so in no way can I just wipe it, that's my main issue. I can live without everything else that's on there.

 

[rharris118]

http://www.tomsguide.com/forum/245705-49-win32-gaelicum-infection

This mentions "kxalil.exe"

Yeah read that earlier. Will have to do a search on the computers and nas for that when I finish work.
I don't know if anybody will know, but can the infection spread across the whole of the nas? What I mean is, there are 3 drives (?) On the nas. One public, one mine, and one my partners. We havent logged into the private sections to hopefully stop it getting in there. It's the public section that we know is infected. Just wondering if anyone knows whether it would be able to infect these parts? It's a seagate central if that makes any difference.

 

[rharris118]

Have you turned off system restore and delete all the old copies and shadow copies prior to running your av and removing it?

I haven't. Is shadow copies enabled by default? I haven't turned it on if it isn't.

I've also ran kaspersky on everything but it didn't find a thing.