Solved

Virus or Spam attack, how to remove ?

Posted on 2007-03-20
4
286 Views
Last Modified: 2013-11-22
Hello experts,
I have a serious virus issue in our office

We have windows 2003 standard server running exchange 2003 and a windows 2000 server as a file server. Desktops are running XP and 2000 with Norton/Symantec antivirus corp edition 7.5 and some pc running 10.0
Few days ago a virus hit us (spybot and downloader). Some pc's were rebuit from scartch and put back onto window 2000. The problem i have is this

1. The newly rebuilt pc's once put on the network gets a qurantine message from NAV saying it qurantined downloader and or "i". Does this mean the virus is coming from the outside or is inside the network.
2. When a pc boots up, if the user dosnt login with a few minutes it comes up with "network request not supported" and if i reboot the pc and login again it is fine.
3. On 2000 boxes the network drives "disconnect" after a while.
4. Email runs fine
5. Network runs slow

My feeling is that there is still 1 or 2 pcs with some sort of spam that is spiting out data onto the network. Can you please let me know what tools i can use to remove this and also how to determine which pc's are infected.

Thanks in advance
0
Comment
Question by:jiveman74
  • 2
4 Comments
 
LVL 27

Accepted Solution

by:
Tolomir earned 250 total points
ID: 18763078
you could install zonealarm on some computers to log intrusion attempts:

http://www.zonealarm.com/store/content/company/products/znalm/freeDownload.jsp

After installation, go to the "log" tab and select "firewall" log in the menu.

0
 
LVL 27

Expert Comment

by:Tolomir
ID: 18763084
0
 
LVL 6

Assisted Solution

by:shayneg
shayneg earned 250 total points
ID: 18767154
do you have windows defender installed to stop spyware, malware etc
0
 

Author Comment

by:jiveman74
ID: 18787757
Hello experts,
Sorry for the delay and thanks for responses. I have been working full nights to sort this out. It turns out one box in the network didnt have av installed so got infected with Spybot and other viruses. Some of this was not also picked up by norton av 8.0. I had to rebuild a 2000 server and put av, windows update etc. The network request not supported error went off after I did the windows updates.

Cheers
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Join & Write a Comment

Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
This story has been written with permission from the scammed victim, a valued client of mine – identity protected by request.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now