I got an really bad virus on my netzworkserver last day,
i think it was comming over the miningsoftware or eth-proxy, witch run on the server,
because no users works on it, not software was on it, and it runs over 5 years without any shutdowns or issues, I installed ETH-proxy last week on it, and trobels began
We also have AV and a Sonicwall installed too
I hope, I dont open a Backdoor with the proxy over it,
Because I checked the LOGs from the server, and it comes over Remote Access
And encrypt the hole server, my luck was a Tape Backup