Since last thursday, the SBS 2003 Exchange Server is acting up
-IE8 was not allowing to type in the fields (This has now been fixed by removing IE8)
-System is very slow.
-It takes lot of time to open consoles.
Mainly,
When I try to install programs, it complains
"
Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item."
I searched this in EE, and found that many have had this specific error before, and upon reading most people's experiences, it seems like they had an issue with a program called "Trend Micro Internet Security Software". And often the solution was to remove explorer.exe from the deny list.
http://www.experts-exchang
http://www.experts-exchang
On Thursday, while working on other issues, with Alan, we found two Registry Hijack issues. (details below), using the software called Malwarebytes Anti-Malware
--------------------------
Scan type: Quick Scan
Objects scanned: 100203
Time elapsed: 5 minute(s), 25 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 0
Registry Data Items Infected:
HKEY_CURRENT_USER\SOFTWARE
HKEY_CURRENT_USER\SOFTWARE
--------------------------
Could this have any relation to the issues I am facing on the server computer?
Unlike the Trend Micro Internet Security Software, I do not see any 'deny' list.
I would like to be able to start to install programs, as it is holding up something else critical on the server.
Thanks
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I just checked again, and these 2 hijack files are still there, even though the malware program says it quarantined it last Thursday and today also. I ran again, and it is still there.
From reading users experiences with 'Trend Micro Internet Security Software', should I remove the malware program? or is my issues bigger than that?
thanks
chuku
I am not yet able to remove them.
I have the one from http://www.malwarebytes.or
we have run this before, and only from working on last Thursday (8 days now), when we found these hijack files.
we have been using exchange for 2 years, and malware for 2 months. But this whole issue started on July 16th.
Here's someone's experience with AVG
http://forums.majorgeeks.c
They uninstalled it and it worked fine for them.
Symantec is disabled now.
Yes, I will take the idea not to browse from server. We use only Admin login on the server. Regardless of if I install from C or network drive, it gives the same error message.
2 hijack files were found in the server: Could this have any issue?
HKEY_CURRENT_USER\SOFTWARE
HKEY_CURRENT_USER\SOFTWARE
I don't think these hijacks are teh problem but work on cleanup before you move on
there is a possibility that the cleanup deleted some important files or registry keys.
that could also be a problem caused by Windows Updates - try removing the last update (or set of updates) you installed
*advertising removed by Netminder 25 July 2009*
chuku
In Add/Remove programs, I do not see any updates by date or much of any updates, only 2 hotfixes for another MS program. I got the latest Service Pack for the server, and that is why I may not be seeing any updates.
What program do you recomend to clean up the hijack files. Malwarebytes could not remove it.
thanks
Ghost is an imaging solution like Acronis and others that image your whole system drive (or others) with a great added advantage of being able to restore to other hardware and install the drivers on first boot. The server version of Ghost is Backup Exec System Recovery Server Edition which used to be called Livestate. There are cheaper programs around now that do this that I am unfamiliar with so far. Best to get up to speed on this stuff, it's really good to use.
Ghost is a full image of your hard disk but with the option to restore to different hardware. For a server it's called BESystemRecovery and costs > $800.
The thing that runs now is a built-in backup which will only restore to the same hardware and is not nearly as versatile or comprehensive in general.
Business Accounts
Answer for Membership
by: chukuPosted on 2009-07-24 at 19:34:10ID: 24940496
did you remove those malewares?
you said you're not using Trend, what are you using? did you try disabling it or removing it?
did it always work before the Exchange installation? did it ever work AFTER the installation or is it slow and faulty from day 1?
*advertising removed by Netminder 25 July 2009*