• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 202
  • Last Modified:

URGENT: PLEASE HELP WITH VIRUS

I am pretty sure I have a virus on one of my 2003 boxes

I am getting this message when I try to access any web pages:

:irc.f**.off.kthx.biz 451 GET :You have not registered
:irc.f**.off.kthx.biz 451 Accept: :You have not registered
:irc.f**.off.kthx.biz 451 Accept-Language: :You have not registered
:irc.f**.off.kthx.biz 451 Accept-Encoding: :You have not registered
:irc.f**.off.kthx.biz 451 User-Agent: :You have not registered
:irc.f**.off.kthx.biz 451 Host: :You have not registered
:irc.f**.off.kthx.biz 451 Connection: :You have not registered
:irc.f**.off.kthx.biz 451 Cache-Control: :You have not registered
ERROR :Closing Link: [68.163.138.77] (Ping timeout)

where f** is an f-bomb.  Does anyone know what the hell is going on here?  When I try to edit any of my IIS web app settings, its says error, the file is in use.

0
jjacksn
Asked:
jjacksn
  • 2
  • 2
1 Solution
 
IceRavenCommented:
Suggestions...

1. Unplug server from the Network.
2. Stop the IIS Services so you can acesss the settings if nessicary
3. Get some anti-virus protection on there if you can. (Make sure it is 2003 Server Compatible)

The web pages you are trying to access, are they local, are they just html or asp or something else?

It looks like something is trying to connect to an irc channel.
Give me some more details and I can give you some more help.

IceRaven
0
 
jjacksnAuthor Commented:
IceRaven,

unfourtunately, I can only access the machine remotely right now, so it must stay connected.

the pages are all in the same directory (c:\web) with 5 different web apps  They root app (Register) is stoped, and when I try to start it, it says "the process cannot access the file because it is being used by another process".

My downloads are extremely slow on the machine, as well.  I am in the middle of downloading the virus protection software.  

This result can be seen when I connect to the ip address of that server.  (normally, it would give me the IIS under construction page since there is no default index.html).  
0
 
IceRavenCommented:
from the command line of the server...

net stop w3svc

This will stop the IIS Web Service.  I am thinking prehaps something is hijacking the IIS or port 80.
Once the service is stopped.  See if you can still connect to port 80.

from the command line of your machine...
telnet yourservername 80

Is the port open?

IceRaven
0
 
jjacksnAuthor Commented:
It was a virus.  had to reinstall everything.  Anyway, problem fixed now.  Got to love Microsoft vunerabilities.  
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now