Link to home
Start Free TrialLog in
Avatar of Paddyo
Paddyo

asked on

Nt Server - easy method to stop Server.exe - virus

Hi

I have an NT Server with a process called Server.exe running. According to Sophos this program is the Troj/Srac-102 virus.

The process cannot be stopped and thus the program cannot be deleted.

Is there an easy way to stop the process and thus delete the program.

Hope someone can help

Paul
Avatar of rj-smith
rj-smith
Flag of United Kingdom of Great Britain and Northern Ireland image


Just a quick suggestion, delete the registry key from HKLM\Software\Microsoft\Windows\CurrentVersion\
Run\ that starts server.exe, run your virus software and then reboot.

Worth a try anyway.
Avatar of Paddyo
Paddyo

ASKER

Thanks rj-smith

I have passed the customer onto Sophos who hopefully will be able to sort them out.

If they cant help I will try your suggestion and let you know what happens.

thank you once again
Avatar of SysExpert
If they do not want to fool with the registry directly.
Here is a free program that allows you to see ALL the startup stuff and disable it as needed.

Download the Startup COP a free pcmag utility from
http://www.pcmag.com/article2/0,4149,2097,00.asp
 Run it and it will show you everything that is listed in all the possible startup
places, and allow you to disable things one at a time until the problem is eliminated.
 A lot of probelms are caused by excess old baggage - programs that have not been properly  un-installed. Startup Cop will eliminate leftovers and un-wanted programs that you no longer want.
Older Antivirus programs and Norton Utilities have been known to cause problems
try disabling them also !

I hope this helps !
Avatar of Paddyo

ASKER

Thanks SysExpert

I dont think this progam will run under Nt Server.

It will come in useful for some other problems.

thanks again
try runing msconfig and look up server.exe in the startup
Avatar of Paddyo

ASKER

Thank you for all of your comments - I should have deleted this question as it was sorted out a good while ago.

Paddyo,

Let us know how the problem was resolved. That's kinda the idea behind this whole thing...
ASKER CERTIFIED SOLUTION
Avatar of Paddyo
Paddyo

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial