Data on the HMI server was being corrupted, this data caused the system to slow and eventually stop. On investigation, it was discovered that the R&T server (in the same domain) had been infected and was totally unusable – unlike the control servers which were partially damaged. The virus was identified as Remote Explorer.
The virus was cleaned over a period of a week and anti-virus was then added to the control system and R&T servers.

No responses yet