RE: Sorry out of topic
- From: "Jamie A. Byrnes" <jabyrnes@xxxxxxxxxxxxxxxxx>
- To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
- Date: Thu, 1 May 2003 16:50:54 +0930
Do you have record of where the virus was found? If it was in the cache
then you can safely say that it isn't the cause, else I would strongly
advise rebuilding the server.
Beware that may viruses can fool/damage anti-virus software after
infection. That's why the only way to be sure is to run it from dos via
a known clean bootable floppy or CD - you will need something like
ntfs4dos if you have NTFS partitions.
Jamie.
-----Original Message-----
From: Ivan Dwi Handono [mailto:ivan_dwi@xxxxxxxxxxxxxxxxxxxx]
Sent: Thursday, 1 May 2003 3:49 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Sorry out of topic
http://www.MSExchange.org/
I check the event logs there is no error related to the proxy problem,
and also I have scan one more time there is no mre virus.
Today FTP publisher service and WWW publisher service can stay longer
(4hrs).
-----Original Message-----
From: John Tolmachoff (Lists)
[mailto:johnlist@xxxxxxxxxxxxxxxxxxx]
Sent: Thursday, May 01, 2003 12:52 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Sorry out of topic
http://www.MSExchange.org/
No one here is a miracle worker that can reach out through the
monitor and solve your problem.
The are many possible problems.
If you suspect a virus, you should do a complete virus scan with
current definitions on the computer, and then do a second one from one
of the on-line scans.
Have you checked the event logs?
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
-----Original Message-----
From: Ivan Dwi Handono [mailto:ivan_dwi@xxxxxxxxxxxxxxxxxxxx]
Sent: Wednesday, April 30, 2003 6:46 PM
To: [ExchangeList]
Subject: [exchangelist] Sorry out of topic
http://www.MSExchange.org/
I have Proxy server with use Microsoft Management Console
ver.1.0 and now I have problem that FTP publishing service and WWW
publishing service on services automatically stop every 30 minute, is it
virus RootCMD (variant from the Code red) the root caused ?
last week when I scan my proxy server I founded one virus called
RootCMD.
Please help me to solve this problem.
Regards
Ivan
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters:
http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ:
http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion
List as: johnlist@xxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters:
http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ:
http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion
List as: Ivan_Dwi@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
jabyrnes@xxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
