[x]
Posted via EE Mobile

Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

Question
[x]
Attachment Details
[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

7.4

Unauthorized port scans coming from our mail server

Asked by webfeat in Windows Network Security

We have been notified by reliable sources that our mail server is running port scans on their server.  We have closed all access to port 10000, (We think that Veritas may have been the culprit) however the outgoing scans continue.  Nortons found dfind.exe and hacktool.dfind and those have been quarantined.  We have also run:  Spybot, Windows Defender, Unhackme, hijackthis, and AA tools but the outgoing scans continue.  This is running on our mailserver and the control.exe seems to be maxing out the processor.  The mailserver is running Merak mail software and appears to have pirated the control.exe file from the mailserver?  (However, the mailserver runs but has given multiple PHP errors over the last week and is running VERY slow.)  I have run multiple searches for the dfind or hacktool files but am unable to locate them or to find what files that they may have launched in order to initiate the port scans.  Hijackthis logs didn't show anything too suspicious.  Help?  What will make this stop!!
This question has been solved and asker verified.
All Experts Exchange premium technology solutions are available to subscription members.
Subscribe now for full access to Experts Exchange and get
INSTANT ACCESS TO THIS SOLUTION
Plus...
30 Day FREE access, no risk, no obligation
Collaborate with the world's top tech experts
Unlimited access to our exclusive solution database
Never be left without tech help again
 
Zone: Windows Network Security
Solution Provided By: Computron
Participating Experts: 1
Solution Grade: B
 
 
 
Loading Advertisement...
20100524-EE-VQP-163