Re: Couldn't log into Windows Server because of a virus



From: "Hammett" <a_athif@xxxxxxxxxxx>

| I booted the server from something called Winternal ERD Commander 2005. I can
| get access to windows file system now.
|
| I scanned the server with Nod32 on-demand scanner. Every executable file in
| the windows directory and sub directories were infected with Win32/Parite.B
|
| when i try to log on to Windows, the computer automatically logs. I tried to
| log on from Safe Mode as well, but that didn't work.
|
| Any advice will be highly appreciated.
|
| Thank you
|
| Ahmed Athif
| (MCSA:Security, MCSE:Security, CCNA,CCNP,CCSP, Security+)
| --------------------------------------
|

The Parite is a True file infecting virus and spreads quite well. In fact, I have actually
seen Trojans infected with it.

Someone wasn't using the server as a server, They were using it as a workstation and didn't
practice Safe Hex. You have an issue here that needs to be resolved ASAP.

Follow Malke's advice !

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


.



Relevant Pages

  • SecurityFocus Microsoft Newsletter #154
    ... MICROSOFT VULNERABILITY SUMMARY ... ISS RealSecure Server Sensor SSL Denial Of Service Vulnerabi... ... Roger Wilco Remote Server Side Buffer Overrun Vulnerability ... available for Microsoft Windows operating systems. ...
    (Focus-Microsoft)
  • SecurityFocus Microsoft Newsletter #49
    ... Subject: SecurityFocus Microsoft Newsletter #49 ... Microsoft Windows NNTP Denial of Service Vulnerability ... Microsoft IIS SSI Buffer Overrun Privelege Elevation Vulnerability ... Microsoft ISA Server H.323 Memory Leak Denial of Service... ...
    (Focus-Microsoft)
  • ~~~~~~~~~~~~~~~ CANNOT FIND ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ... cannot find server or dns error ... windows cannot find null ... windows cannot find the network path ... cannot find internet explorer on computer ...
    (comp.protocols.snmp)
  • Questions Relating to Administering Windows 2000 Server
    ... installed the network client on the target computer. ... Sarah has been attempting to install Windows 2000 ... Server for two days. ... Sarah has checked the cables and hard drives. ...
    (microsoft.public.cert.exam.mcse)
  • pqv¼Ò¹ÚÇÑ ²Þ@mBGRx
    ... O-009¹Ù¢Ã MS Windows 2000 Datacenter Server -2¸¸¿ø ... Main Application (Borland C++ Builder 6 Enterprise Edition) ... Y-166¢Ã Sex Starved Sluts 1 (Divx) ...
    (FreeBSD-Security)