Scanning AD clients centrally for a single malicious file

[Guest M_Hood]

Hi All,

 

we have encountered a problem recently where a single malicous file called

kill.bat has been running on our servers. We have some 120+ servers so it is

not practical to maunually search each of these. Is there any way I can run a

command, or download a program which will allow me to search all clients for

this program? I know another option would be to run a script to delete this

file if it is found, but I would like to know if it is on the servers before

doing this (or have a record of where it was prior to deletion).

 

Thanks in advance