metamatic
asked on
Has anybody come accross spyware/malware called XNET666?
I am having a problem with the DNS server on my network (single server running 2003 standard). The DNS server appears to be running perfectly but when I try to access the console I get an error syaing that I cannot connect.
To cut a long story short I have raised a Microsoft support call on this issue and they asked me to send them a netmon trace. They came back to me and said the netmon trace contained a reference to a website called XNET666 and they believe there is some spyware or possibly a Denial of Service application being run from our server.
Now, i have run an adaware scan, a microsoft anti spyware scan, a Macafee Virus Scan 8 full system scan, a full registry and file search and can't find any reference to XNET666. I have also had a look on the internet and the few websites that mention it are all in German.
So, here are my questions....
1. Does anybody know anything about XNET666, what it does and how you get rid of it?
2. Can anyone recommend any anti spyware/malware programs (either free or commercial) which may be more effective than the 2 which I have tried.
Hope you can help
Cheers
Andy
To cut a long story short I have raised a Microsoft support call on this issue and they asked me to send them a netmon trace. They came back to me and said the netmon trace contained a reference to a website called XNET666 and they believe there is some spyware or possibly a Denial of Service application being run from our server.
Now, i have run an adaware scan, a microsoft anti spyware scan, a Macafee Virus Scan 8 full system scan, a full registry and file search and can't find any reference to XNET666. I have also had a look on the internet and the few websites that mention it are all in German.
So, here are my questions....
1. Does anybody know anything about XNET666, what it does and how you get rid of it?
2. Can anyone recommend any anti spyware/malware programs (either free or commercial) which may be more effective than the 2 which I have tried.
Hope you can help
Cheers
Andy
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
It turned out that it was due to a PC on the network being infected with a variant of the rbot worm. Once I cleaned it off everything was fine.