Hi,
My small business uses a server running win 7 with up to 3 people remotely accessing it via RDP.
One of the users had a process called javaws.exe that was using a large chunk of memory. The first time i saw it a few days ago i terminated the process and all was good.
Today i saw the process again and after a quick google found it was a rather annoying trojan. The process dissapeared form task manager not long after detection and the RAM usage dropped but not by a large enough portion considering it was using 1.3 GB of Ram. I have since restarted the system and it has not shown up again in task manager in the hour since the restart. I did read that this particular virus is a deceptive and tricky one to remove though.
I have in months past had an issue with a virus i believe came via a word doc someone opened from a random sender via email. I believe that i removed that and solved any issue related to it after detection. Now with this discovery i'm not so sure.
Any help from a forum admin would be greatly appreciated.
I have included the FRST.txt and Addition.txt files as requested when making a forum post.
FRST.txt
Addition.txt