Thanks again. Like I said, we've had an intern who messed up the server real bad. I am trying to rectify the situation now.
I guess I should've removed my IP from the log file before posting after all ! I don't want this page to show up in search results !
Thank you all for your help. I know one shouldn't be browsing the internet from the server (it wasn't me actually)
UPDATE: I discovered we have "Sality.Y" virus all over the network. I can't format and reinstall the server now, it will take a long time and people are using the server.
Other...
Thanks for all the suggestions.
I have done another scan with BitDefender Rescue disk. It cleaned everything up but the server is still terribly slow.
Frankly, I am starting to doubt there is still malware on the server- I think it's simply corrupted now.
I still get the spam email. But that may...
Thanks for your help.
The main problem is that I cannot load in safe mode. Whenever I try to boot in safe mode, I get a blue screen. Is it possible a virus could do that ??
I already did a scan using Malware bytes (in normal mode) but it found nothing.
I went ahead and disabled a lot of the...
For the record, I've used Bitdefender's rescue disk. It found about 2000 infections and deleted them, but the problem still persists.
Here's the log from HijackThis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:24:53 AM, on 1/26/2009
Platform: Windows 2003 SP2 (WinNT 5.02.3790)...
Hello all,
I have a malware on our server (Windows 2003 with Exchange) that causes the following:
1- I keep getting spam from all the users on the domain
2- When I try to search for "virus" on IE on the server, the search is blocked and no results are displayed !
3- The network is really slow...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.