Re: Mail server affected Trojan virus

From: Malke (malke_at_nospoonnotreally.com)
Date: 09/02/04


Date: Thu, 02 Sep 2004 05:02:48 -0700

Srikanth wrote:

> Hi,
>
>
> I am Srikanth from Macmillan. We have Exchange 2k server
> which has symantec mail security 4.5. It filters mail, but
> still it affected by trojan virus how? and I removed.
>
> After that Mail server POP3 account is very slow when ever
> a huge attachments comes all the users are in queue and
> wait mode why?
>
> Please help me in these regards. Awaiting your reply..
>

You should not post your real email address unaltered (disguised) on
Usenet or in messageboard posts. It will be harvested by spambots and
you'll get lots more spam and viruses.

There really isn't any way to give you a specific answer with the little
information you provided. You didn't even mention the name of the
virus. However, from your brief description I would have to say that
your server - and possibly workstations - are still not clean. You need
to do a thorough virus and malware scan of all network machines.
Ideally, the network should be down when you do this because if you
have a network-aware worm, cleaning one pc while other are still
infected and on the network will just reinfect everything.

If your server has been compromised, best practice is to wipe it clean
and reimage with your most recent backup image.

If you would like more specific help, please repost with details about
your infection and what you've already done. Is Symantec Mail Security
a full-featured antivirus or does it only filter spam and attachments?

Malke

-- 
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"


Relevant Pages

  • Re: Fully parallel Scheme-based language w/ evaluator
    ... Windows Server 2003 and networks in simple - and irreverent - terms. ... If networking really is a big deal, ... Concepts and Terminology in Part I, and The Design and Deployment of Network ...
    (comp.lang.misc)
  • Re: Outgoing POP3 email missing/lost/not received
    ... Funny thing is that I have had this ISP for 8 years and it has always been ... It looks like when you last ran CEICW, you set the ISP's mail server to: ... Internet Connection Wizard. ... After the wizard completes, the following network connection ...
    (microsoft.public.windows.server.sbs)
  • Re: Logon Server Unavailable
    ... There are currently no logon servers available to service ... You use a office laptop to connect the office VPN, when you map a network ... you may receive this message: "This account is the ... The server is not configured for transactions"> "A domain controller for your domain could not be contacted" ...
    (microsoft.public.windows.server.dns)
  • Re: Logon Server Unavailable
    ... There are currently no logon servers available to service ... You use a office laptop to connect the office VPN, when you map a network ... you may receive this message: "This account is the ... The server is not configured for transactions"> "A domain controller for your domain could not be contacted" ...
    (microsoft.public.windows.server.networking)
  • Re: Logon Server Unavailable
    ... There are currently no logon servers available to service ... You use a office laptop to connect the office VPN, when you map a network ... you may receive this message: "This account is the ... The server is not configured for transactions"> "A domain controller for your domain could not be contacted" ...
    (microsoft.public.windows.server.general)