help...someone hack into our system

Hi,

this morning, I found the D drive of our exchange server is 13 GB data more than usual.
Someone upload a lot of music file...


I also fould folder called emule...there is a thread is system called emule.exe, and I can not stop it...so I could not delete the files on my hard disk

Please help me!
robinyanwangAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
f_umarConnect With a Mentor Commented:
emule is a p2p file sharing program you can share your files or download files from other users of edonkey network.

try to boot into safe mode then try to uninstall emule if not able to do it then see system information in software environment locate the startup folder and see if u can locate emule.exe entry their it would not let you remove but it will give you the information about the registry key which is holding it, u can then edit the registry and search the key or emule.exe entry in the entire registry (edit--find) then delete it.

use firewall for internet access also apply all the patches for installed products, change administrative passwords.

before doing anything take a full backup of your system.

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.