Windows 2003 web server virus

ITMaster1979 used Ask the Experts™
Hi All,

 I have windows 2003 server runs IIS, when I login in usinf remote desktop Im getting a cmd box saying its trying to connect to external IP using FTP command, and then it disappear, i belive this is s kind of virus or backdoor, also Im getting  error loading c:\proramfiles\windowsw.ini error each time, any advise
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2011

I recommended to go through the following steps.

1. Check windows start up through MSCONFIG and disable all the start up applications. (except you know).
2. Check schedule tasks for any unwanted tasks
3. Full scan system with Trojan remover
4. By design there won't be any INI file under program file.

Sanjay Santoki

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial