Hello,
My server was acting strangely. My hidden shares disappeared. I put them back and 5-10 minutes later they were gone again. My non-hidden shares were not affected. Also, no entries are being written to my security log. It is turned on, just not recording any information.

This server is a windows 2000 sp4. I installed and ran McAfee virus software.
It found polywann virus and cleaned it. It also found NTRootKit-P and was unable to clean it. At this point, I ran F-Secure blacklight tool on my server. It found sqlserv.exe as a hidden process. I do run microsoft sequel legitimately on this server so I do not know whether I should set it to clean this or not.

Any advice?
Thank you!