Re: Server down - virus?

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Brendon Rogers (brendon_at_nospam-itology.net)
Date: 04/01/04


Date: Thu, 1 Apr 2004 12:41:20 -0500

See
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/593.asp

"Karl" <kthompson@pine-grove.com.nospam> wrote in message
news:#fwWSgAGEHA.3372@TK2MSFTNGP09.phx.gbl...
>
> On Monday morning we came in and no one was able to connect to the server
> (nor were they able to connect via VPN over the weekend).
>
> There was a message on the server that stated "Event log full".
>
> It took the outside networking firm which provides support about 5 hours
to
> get the server back up. They blamed it on a virus which "must have come in
> via a VPN connection". (There is suppose to be an anti-virus program
> running on the server.)
>
> So, my questions are, is it likely that the server was down due to a
virus,
> or could the event log being full have something to do with it? Is 5
hours
> a reasonable amount of time required to bring a server back up? (They did
> not rebuild it. Nor did they reinstall any software. This also seems
strange
> to me if in fact there was a virus.)
>
> Any comments from you pros would be greatly appreciated.
>
> TIA.
>



Relevant Pages

  • Re: Exchange can send but wont receive after Lovegate worm.
    ... Recommended advice for a compromised system is to flatten and reinstall, ... I have no experiance with trend but know it is very good. ... server / exchange via email. ... All workstations 100% uptodate with virus checkers? ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Is VMS losing the Financial Sector, also?
    ... On Behalf Of Bill Gunshannon ... Is VMS losing the Financial Sector, ... One of their Customers was running Windows Server and was down for 2 ...
    (comp.os.vms)
  • Re: Is my linux box an email zombie? Mydoom?
    ... It looks like my server is sending out spam to ... > now that I know there are actually virus and worms targeting linux. ... > If I reinstall and run GUI as non-root, and do not open attachments, ... trickery to get you to open the attachments & infect your computer. ...
    (comp.os.linux.security)
  • Re: Information Store taking all available memory.
    ... There are cases where the virus software is scanning things it should not ... The aforementioned should be excluded in the virus software. ... Do Not Back Up or Scan Exchange 2000 Drive M ... Understanding Virus Scanning API 2.0 in Exchange 2000 Server ...
    (microsoft.public.exchange2000.information.store)
  • Re: Frustrated with Trend CSM!
    ... You must exclude them from Officescan, ... Click on your SBS computer icon, and set the client priveliges to your ... settings for the server versus the clients. ... > "Virus successfully detected, but infected file can neither be cleaned nor ...
    (microsoft.public.windows.server.sbs)