server is being hacked



every month I am finding either one or two services that are hack
services. I delete the files and clean the service in the registry
then between 1 and 3 months a new hack is on my server. I have
symantec 10.2 and symantec for exchange and a barracuda on the outside
of my network. Can any one help to find the root of this issue. I use
the normal tools like rootkit revealer and aports for scanning my
ports but still they get in. I check my server a few times a day and
usually I catch it within a day but that might be to late. My updates
and patches are up to date. I am running SBS 2003 sp2 and exchange
2003 sp1.

Thank You
.



Relevant Pages

  • Re: Convincing the boss to move to Exchange
    ... You would be substituting Trend Micro for Symantec. ... Trend to server and, finally, install it to the workstations. ... Will Trend for Exchange work with Symantec Corporate AV? ...
    (microsoft.public.windows.server.sbs)
  • Re: Exchange errors 9564 and 9665
    ... I would also strongly recommend that you run ExBPA against your server as it ... Run Microsoft Exchange Server Best Practices Analyzer Today ... > Symantec Mail Security Version 4.6. ...
    (microsoft.public.exchange2000.information.store)
  • Re: Calendar Appointments Disappear
    ... > software items- Symantec hangs when you try and view a scheduled job, ... Exchange agent for BE if they don't have it. ... What kind of antivirus scan did you run? ... > there being only one server, with that one server being the sole AD ...
    (microsoft.public.exchange.admin)
  • Re: Calendar Appointments Disappear
    ... >> even after reinstalling the software, and Backup Exec doesn't see ... Wanted to add that Symantec had to be held back from scanning ... Exchange in two places: ... New server came up on Thursday. ...
    (microsoft.public.exchange.admin)
  • virus alerts on exchange server 2k
    ... >also use Symantec Antivirus Filter Version 3.0, ... for protecting the server against virus ... >from the last 3 weeks i have been noticing virus alerts as ... Check in exchange manager to see if your mailbox cleanup ...
    (microsoft.public.exchange2000.general)