Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Windows 2003 Server SP2 Spambot

Started by seagal3k , Feb 18 2010 07:36 AM

Please log in to reply

#1
seagal3k

Posted 18 February 2010 - 07:36 AM

New Member

Member
1 posts

Hi,

I'm in big trouble.
One of my customers servers are infected with a spambot or similar.
First i ran CCleaner to clean up files and registry before scanning.
I've used the following programs fully updated without beeing able to remove the threat:
SpyBot - Search and Destroy
Ad-Aware - Free Edition
Spyware doctor - Registered version
Malware Bytes - Anti Spyware
BitDefender Online Scanner
Trend Housecall Online Scanner
SuperAntiSpyware
Trend Micro - Server Security (running on server)

All Programs say that the computer is now clean.

Trend Micro RuBotted is running and gives the following messages:
"Detected DNS query of malicious domain"
And this message
"Detected mass mailer or spambot"

The Exchange server's Queues fills up with thousands of mail.

Attached is logs.