|
Posted by =?Utf-8?B?SGFtbWV0dA==?= on January 21, 2007, 4:31 am
If you were Registered and logged in, you could reply and use other advanced thread options
Hi everyone,
My Domain Controller has been infected by a virus. I couldn't log in to the
domain controller anymore, neither can manage it from another network
station. And is it leasing IP addresses from DHCP. And I can't even login in
Safe Mode.
Can anyone please advice me on what I should do to overcome this problem?
There's certainly a virus in the system, because when i try to log-in, the
virus alert window comes up very fast, and forces to log-off.
Thank you very much.
|
|
Posted by Leythos on January 21, 2007, 7:49 am
If you were Registered and logged in, you could reply and use other advanced thread options
Hammett@discussions.microsoft.com says...
> Hi everyone,
>
> My Domain Controller has been infected by a virus. I couldn't log in to the
> domain controller anymore, neither can manage it from another network
> station. And is it leasing IP addresses from DHCP. And I can't even login in
> Safe Mode.
>
> Can anyone please advice me on what I should do to overcome this problem?
>
> There's certainly a virus in the system, because when i try to log-in, the
> virus alert window comes up very fast, and forces to log-off.
Take the drives and put them in another computer and scan them with a
quality AV solution.
--
spam999free@rrohio.com
remove 999 in order to email me
|
|
Posted by David H. Lipman on January 21, 2007, 8:29 am
If you were Registered and logged in, you could reply and use other advanced thread options
| Hi everyone,
|
| My Domain Controller has been infected by a virus. I couldn't log in to the
| domain controller anymore, neither can manage it from another network
| station. And is it leasing IP addresses from DHCP. And I can't even login in
| Safe Mode.
|
| Can anyone please advice me on what I should do to overcome this problem?
|
| There's certainly a virus in the system, because when i try to log-in, the
| virus alert window comes up very fast, and forces to log-off.
|
| Thank you very much.
What do you mean ...
"virus alert window comes up very fast, and forces to log-off"
What virus alert ?
What software ?
Please supply facts !
Can you at least remotely manage the server ?
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
|
|
Posted by =?Utf-8?B?SGFtbWV0dA==?= on January 22, 2007, 7:00 am
If you were Registered and logged in, you could reply and use other advanced thread options
get access to windows file system now.
I scanned the server with Nod32 on-demand scanner. Every executable file in
the windows directory and sub directories were infected with Win32/Parite.B
when i try to log on to Windows, the computer automatically logs. I tried to
log on from Safe Mode as well, but that didn't work.
Any advice will be highly appreciated.
Thank you
Ahmed Athif
(MCSA:Security, MCSE:Security, CCNA,CCNP,CCSP, Security+)
--------------------------------------
"David H. Lipman" wrote:
>
> | Hi everyone,
> |
> | My Domain Controller has been infected by a virus. I couldn't log in to the
> | domain controller anymore, neither can manage it from another network
> | station. And is it leasing IP addresses from DHCP. And I can't even login in
> | Safe Mode.
> |
> | Can anyone please advice me on what I should do to overcome this problem?
> |
> | There's certainly a virus in the system, because when i try to log-in, the
> | virus alert window comes up very fast, and forces to log-off.
> |
> | Thank you very much.
>
> What do you mean ...
> "virus alert window comes up very fast, and forces to log-off"
>
> What virus alert ?
> What software ?
>
> Please supply facts !
>
> Can you at least remotely manage the server ?
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>
|
|
Posted by Malke on January 22, 2007, 8:24 am
If you were Registered and logged in, you could reply and use other advanced thread options
> I booted the server from something called Winternal ERD Commander 2005. I can
> get access to windows file system now.
>
> I scanned the server with Nod32 on-demand scanner. Every executable file in
> the windows directory and sub directories were infected with Win32/Parite.B
>
> when i try to log on to Windows, the computer automatically logs. I tried to
> log on from Safe Mode as well, but that didn't work.
>
> Any advice will be highly appreciated.
>
> Thank you
>
> Ahmed Athif
> (MCSA:Security, MCSE:Security, CCNA,CCNP,CCSP, Security+)
With all those fancy letters after your name, you should know that you
need to flatten that infected server and possibly your workstations
also. Apply your most recent backup images. I'm sure this isn't what you
wanted to hear, but it is the right course of action for proper network
security.
According to this Sophos article, your entire network is probably infected:
http://www.sophos.com/virusinfo/analyses/w32pariteb.html
Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
|
| Similar Threads | Posted | | Windows 2003 server - firewall / virus protection | March 7, 2006, 7:06 pm |
| Security issue with MS Exchange and Windows 2003 Server | November 28, 2005, 5:05 pm |
| Win 2K Server anti virus | July 25, 2005, 4:49 pm |
| Anti-Virus on Server - Advice | September 8, 2005, 7:33 am |
| setiathome virus on a 2003 server | October 24, 2005, 3:20 am |
| Re: Server Infected by virus and unable to clean | May 31, 2007, 2:04 am |
| anti-virus for 2008 Server Core ? | October 6, 2008, 3:06 pm |
| Virus Scan SCSI HDD for Server HP ML370 Series G4 Series | October 13, 2008, 10:06 am |
| my network server has a virus and i can not conect to the network. | November 1, 2008, 6:19 pm |
| Virus on Windows Xp Embedded | October 19, 2005, 2:28 pm |
|
XML site map