Troy, DO NOT TRY TO COPY ANYTHING ELSE TO YOUR SERVER HARD DISK 1!!!!!!! Every time you do you lose more data. HD1 will have to go to a data recovery business now!
Step one disconnect the first computer from the network, If you don't it will try to re-infect the network!
Step two, I believe you said that hd2 was a mirror of hd1 it should be 90% up to date.
Step three, you need at least one new hard drive, maybe two. One for the new mirror drive, and one for drive three.
Drive three may not have data on it due to software glitch, or a hard drive defect.
Step four run anti virus software with latest updates on all your computers and the server.
Note anti virus software should be running on all computers and servers all the time. It should be updated at least once a week. Windows update site should be checked for security patches every week. They have had some very important updates to internet explorer recently, and I believe to your server also!! Just this week!
Here is what I believe happened, The virus attacked the boot file on both the first computer and the network server HD1, it then went on to delete every file on the network server, and maybe the first computer. It probably tried to plant it self on all other computers connected to the network, that way it can attack you again when you get the system up and running again.
If the virus used the dos(windows) delete command there is a good chance you can have the data recovered by a data recovery company. Now that you have copied new data from hd3 on top of data already on hd1 your chances of recovery are much lower than before, but you still have a chance.
Note you may want to remove the delete command, or rename it.
Wish I could give you better news.
Come see me at Systematic Investing group #board-966 lets talk formula plans.
