Solved

URGENT:  PLEASE HELP WITH VIRUS

Posted on 2004-04-14
4
191 Views
Last Modified: 2010-04-19
I am pretty sure I have a virus on one of my 2003 boxes

I am getting this message when I try to access any web pages:

:irc.f**.off.kthx.biz 451 GET :You have not registered
:irc.f**.off.kthx.biz 451 Accept: :You have not registered
:irc.f**.off.kthx.biz 451 Accept-Language: :You have not registered
:irc.f**.off.kthx.biz 451 Accept-Encoding: :You have not registered
:irc.f**.off.kthx.biz 451 User-Agent: :You have not registered
:irc.f**.off.kthx.biz 451 Host: :You have not registered
:irc.f**.off.kthx.biz 451 Connection: :You have not registered
:irc.f**.off.kthx.biz 451 Cache-Control: :You have not registered
ERROR :Closing Link: [68.163.138.77] (Ping timeout)

where f** is an f-bomb.  Does anyone know what the hell is going on here?  When I try to edit any of my IIS web app settings, its says error, the file is in use.

0
Comment
Question by:jjacksn
  • 2
  • 2
4 Comments
 
LVL 7

Accepted Solution

by:
IceRaven earned 500 total points
ID: 10830501
Suggestions...

1. Unplug server from the Network.
2. Stop the IIS Services so you can acesss the settings if nessicary
3. Get some anti-virus protection on there if you can. (Make sure it is 2003 Server Compatible)

The web pages you are trying to access, are they local, are they just html or asp or something else?

It looks like something is trying to connect to an irc channel.
Give me some more details and I can give you some more help.

IceRaven
0
 
LVL 5

Author Comment

by:jjacksn
ID: 10830597
IceRaven,

unfourtunately, I can only access the machine remotely right now, so it must stay connected.

the pages are all in the same directory (c:\web) with 5 different web apps  They root app (Register) is stoped, and when I try to start it, it says "the process cannot access the file because it is being used by another process".

My downloads are extremely slow on the machine, as well.  I am in the middle of downloading the virus protection software.  

This result can be seen when I connect to the ip address of that server.  (normally, it would give me the IIS under construction page since there is no default index.html).  
0
 
LVL 7

Expert Comment

by:IceRaven
ID: 10830742
from the command line of the server...

net stop w3svc

This will stop the IIS Web Service.  I am thinking prehaps something is hijacking the IIS or port 80.
Once the service is stopped.  See if you can still connect to port 80.

from the command line of your machine...
telnet yourservername 80

Is the port open?

IceRaven
0
 
LVL 5

Author Comment

by:jjacksn
ID: 10969363
It was a virus.  had to reinstall everything.  Anyway, problem fixed now.  Got to love Microsoft vunerabilities.  
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
home drive migration 16 66
Elevating Domain functional level 9 107
Best practice DHCP migration 7 55
heat agent push through GPO 2 34
This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now