I check the event logs there is no error related to the proxy problem, and also I have scan one more time there is no mre virus. Today FTP publisher service and WWW publisher service can stay longer (4hrs). -----Original Message----- From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] Sent: Thursday, May 01, 2003 12:52 PM To: [ExchangeList] Subject: [exchangelist] RE: Sorry out of topic http://www.MSExchange.org/ No one here is a miracle worker that can reach out through the monitor and solve your problem. The are many possible problems. If you suspect a virus, you should do a complete virus scan with current definitions on the computer, and then do a second one from one of the on-line scans. Have you checked the event logs? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -----Original Message----- From: Ivan Dwi Handono [mailto:ivan_dwi@xxxxxxxxxxxxxxxxxxxx] Sent: Wednesday, April 30, 2003 6:46 PM To: [ExchangeList] Subject: [exchangelist] Sorry out of topic http://www.MSExchange.org/ I have Proxy server with use Microsoft Management Console ver.1.0 and now I have problem that FTP publishing service and WWW publishing service on services automatically stop every 30 minute, is it virus RootCMD (variant from the Code red) the root caused ? last week when I scan my proxy server I founded one virus called RootCMD. Please help me to solve this problem. Regards Ivan ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: johnlist@xxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: Ivan_Dwi@xxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')