Computers| Computers |
|
05-12-2005, 12:13 AM
| #1 (permalink) | |
| Rustlin' Up A Post Count  Join Date: Jan 2004 Location: Sydney, Australia
Posts: 4,165
|  Exchange Server Infected Here the clients set up.... Cleints Server :- WINDOWS SBS 2000 SUITE Running Exchange 2000 Running SQL 2000 AntiVirus :- Symantec Corporate. The problem with this server is that the exchange has been infected down to the point that the MAILBOX STORE and THE PUBLIC FOLDER STORE will not mount. When we retry to remount the services, we get the error message :- Quote:
SQL is still running. Since then, we have installed EXCHANGE SERVICE PACK 3 hoping that it will fix the problem. No luck And now it coming down to the fact that we have W32.sober.0@mm!.enc and 32.netsky.p@mm viruses on this system. Now we have ran Symantec Removal Tool, and it does not remove the virus. We ran McAffee Stinger (latest verion), it detect it, but again does not remove it. We have actually gone in and deleted the invidual files that are infrected, but the virus then multiplies. And the other problem is that I need to do this remotely as this server is about 300km away. I would like to avoid driving their if I have too. Need suggestions on removing this virus once and for all.
__________________ Keyboard Cowboy Weapon Of Mass-Distraction - AMD Opteron Dual Core 170, MSI RS482M4-L Motherboard, 3x 1Gb DDR @ FSB 400, ATi Radion H3870 512Mb PCI Express Video Card, 1.2Tb Total Hard Drive Space, Creative Sound Blaster Audigy ZS, Sunbeam UFO Acrylic Cube Case UV Blue Case, Cooler Master Real Power 550 Power Supply, Acer AL2416W 24" Wide TFT Display, Windows Xp Pro SP3 | |
|  |
|
05-12-2005, 12:17 AM
| #2 (permalink) |
| Rustlin' Up A Post Count Join Date: Jan 2004 Location: Sydney, Australia
Posts: 4,165
| Now I have all ready suggested about isolating the server by disconnecting the the workstations from it. And from there carrying out a virus scans and clean up on the other work stations. Then reconnecting the workstation after we know they are clean and the server is clean. It's really coming down to cleaning up the server.
__________________ Keyboard Cowboy Weapon Of Mass-Distraction - AMD Opteron Dual Core 170, MSI RS482M4-L Motherboard, 3x 1Gb DDR @ FSB 400, ATi Radion H3870 512Mb PCI Express Video Card, 1.2Tb Total Hard Drive Space, Creative Sound Blaster Audigy ZS, Sunbeam UFO Acrylic Cube Case UV Blue Case, Cooler Master Real Power 550 Power Supply, Acer AL2416W 24" Wide TFT Display, Windows Xp Pro SP3 |
|
| |
|
05-12-2005, 10:13 PM
| #4 (permalink) | |
| Rustlin' Up A Post Count Join Date: Jan 2004 Location: Sydney, Australia
Posts: 4,165
| Quote:
We really don't want to blow away the client's emails if we don't have to.
__________________ Keyboard Cowboy Weapon Of Mass-Distraction - AMD Opteron Dual Core 170, MSI RS482M4-L Motherboard, 3x 1Gb DDR @ FSB 400, ATi Radion H3870 512Mb PCI Express Video Card, 1.2Tb Total Hard Drive Space, Creative Sound Blaster Audigy ZS, Sunbeam UFO Acrylic Cube Case UV Blue Case, Cooler Master Real Power 550 Power Supply, Acer AL2416W 24" Wide TFT Display, Windows Xp Pro SP3 | |
|
| |
Linear Mode
