Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Windows 2003 Server SP2 Spambot


  • Please log in to reply

#1
seagal3k

seagal3k

    New Member

  • Member
  • Pip
  • 1 posts
Hi,

I'm in big trouble.
One of my customers servers are infected with a spambot or similar.
First i ran CCleaner to clean up files and registry before scanning.
I've used the following programs fully updated without beeing able to remove the threat:
SpyBot - Search and Destroy
Ad-Aware - Free Edition
Spyware doctor - Registered version
Malware Bytes - Anti Spyware
BitDefender Online Scanner
Trend Housecall Online Scanner
SuperAntiSpyware
Trend Micro - Server Security (running on server)

All Programs say that the computer is now clean.

Trend Micro RuBotted is running and gives the following messages:
"Detected DNS query of malicious domain"
And this message
"Detected mass mailer or spambot"

The Exchange server's Queues fills up with thousands of mail.

Attached is logs.

Attached Files


  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP