Re: Event ID 26. You computer may be infected.

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



On Thu, 12 Oct 2006 11:42:45 -0500, "Bunert" <rizenbone@xxxxxxxxx> wrote:

I have a W2k3 domain controller and a W2k member server.

Both have been running fine for weeks, months, years.

There have been no changes to either machine in the last few days.

All of a sudden today, I am getting a messenger application pop-up from
the
domain controller that says:

Message from DC to Server at XX:XX:XX AM on XX/XX/2006.

Your computer may be infected by a virus and may be attacking other
computers on the network.

Please check your antivirus pattern and your software.

It logs even ID 26 with the same description on the W2k member server -
nothing is logged on the W2k3 controller.

"nesredep egrob" <Long. -31,48.21 Lat. 115,47.40> wrote in message
news:5bnti2tcol257dbgvq1c2q6qsjqs5dn44l@xxxxxxxxxx
While watching, for the first time ever, something on Utube, I got a
similar
pop-up in Firefox, even claiming to be from Microsoft. It fortunately
asked
'clean this virus', I rejected that and have run several programs to check
the
computer, No trouble, seemingly.
There was an update from MS just yesterday. That might have been the
reason
something was discovered. I was advised by the program to be very still
and
watch out, odd.
I shall run another couple of programs and await further events.


Thanks for the response. In my case, the messenger and event log entry
occurred at a time when the server was essentially idle. No users had
arrived for the day yet to use the MRP system and though I'll have to double
check, I believe backup was idle as well.

Very strange. At least so far today - no issues.


.



Relevant Pages

  • Re: Slow Computer - Please Help
    ... >It should be showing approx 97% when idle. ... other than doing some tweaking to improve boot and shutdown times. ... I install all recommended ... I defrag regularly, Virus Scan daily, Spybot 2x a week. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Block clients from accessing domain controllers
    ... A little too dirty. ... have the virus on their machine. ... >>inside and outside the domain from making logon attempts ... >>the domain controller. ...
    (microsoft.public.win2000.networking)
  • Re: Active Directory problem
    ... describes a virus as the cause of this. ... and Services tool in Windows 2000 Server ... doesn't know it's the domain controller. ... correct, the server points to itself as the primary DNS server, the ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Question
    ... For safety reasons and to save some money, turn it off unless you run some ... tasks - virus check, for ex. ... On idle, it does not overheat unless some task pops up and your APM does not ...
    (microsoft.public.windowsxp.general)
  • ~.dat
    ... delete it it reappears the following week. ... Coincidentally my PC crashes if left idle for 10 mins or ... they both say I do not have a virus. ...
    (microsoft.public.windowsxp.security_admin)