Virus "hiding" on server...

[EvanK]

I'm trying to help out a friend who has a server. He said that there's a virus on the server that he can't get rid of, and he said it's "hiding in the antivirus program" he has. He's not sure exactly what the virus is, but does this sound familiar to anyone?

 

[smah]

No, but if he can access the internet with this server, have him try a few of these faq760-3862

 

[glacierxx]

How does he know the virus is there. Is he getting an alert and then when he goes to the location it is not there. This usually occurs when a virus is quarantined by the antivirus application and place in the quarantine folder. Tell him to look in the quarantine folder and if there is anything there delete it.

"evil prospers when good men do nothing”

 

[EvanK]

he knows its there because apparently it's hit him several times. he didnt specify exactly what it did though (i don't think he's really very sure, hes not very tech savvy). i was just wondering if this sounds familiar to anyone

 

[enkie]

well, we need to validate first if it is really a virus. Aside from this, certain attacks that are flagged in a machine does not exactly means that the system is infected. For example, if he has an open network share and another computer drops a copy of a malware there, it will be flagged and detected in his machine but it does not mean that his system is infected. please give us more details. He can also go to free web based scanners like:

http://housecall.trendmicro.com

enkie

 

[cmeagan656]

The virus could be hiding in the system restore files if he's running W2K or higher.

Disable system restore, scan for viruses, remove any that are found, reboot the computer, and then enable system restore again.

Cheers.

 

[2ffat]

Does he think he has a virus becuase someone is getting email from him with the virus attached? If so it may not be his machine that is infected by someone who has his address in their mailbox.

Aside from the system restore, some virii hide in network devices' RAM. Is he connected to a network?

It may not even be a virus but some form of spyware/malware. It his AV up to date?



James P. Cottingham

When a man sits with a pretty girl for an hour, it seems like a minute. But let him sit on a hot stove for a minute and it's longer than any hour. That's relativity.
[tab][tab]Albert Einstein explaining his Theory of Relativity to a group of journalists.