NAVLOG.EXE and Praise for MS Security Support

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Bwallacejr (Bwallacejr_at_discussions.microsoft.com)
Date: 02/13/05 

Date: Sun, 13 Feb 2005 04:57:02 -0800

For the past 2+ weeks I've been fighting a problem with our SBS2003 Server.

First I thought it was a problem with our DSL Line; once I was convinced it
wasn't their problem I started looking inside. TrendMicro, and various
spyware programs could not find the problem.

TrendMicro asked me to download 2 programs from www.sysinternals.com -
ProcessExplorer and TCPView. Both were a big help and using TCPView I found
a program NAVLOG.EXE running on our server that was hogging our bandwidth and
sending out "something" to other servers. It also messed up OWA and other
web services.

I could end the process but when I rebooted, it came back and seemed to
damage another service.

TrendMicro was working on the problem but after 2 days of no suggestions, I
decided to call Microsoft Security Support.

I called Microsoft Security Support on Friday and had the best support
experience I've had in years. The person (I'm not sure if I should post
names here) from the Microsoft Small Business Server Team found the problem
quickly, removed it and it's registry entries and then fixed the other
affected services. It was customer support at it's best.

I want to thank everyone in this newsgroup that helped me with this and most
importantly, the people and Microsoft for fixing it. 

-- 
B Wallace
www.tapeandmedia.com
www.tapeandmeda-data.com
www.tapeandmedia-dvd.com

Relevant Pages

  • RE: Internet Connection (Speed) Problem
    ... It seems that I had a virus/trojan/spyware on our server. ... up OWA and other internet related services. ... I called Microsoft Security Support on Friday and had the best support ... quickly (which TrendMicro had not done), removed it and it's registry entries ...
    (microsoft.public.windows.server.sbs)
  • Re: Problems with OWA
    ... It seems that I had a virus/trojan/spyware on our server. ... up OWA and other internet related services. ... I called Microsoft Security Support on Friday and had the best support ...
    (microsoft.public.windows.server.sbs)
  • Re: NAVLOG.EXE and Praise for MS Security Support
    ... > ProcessExplorer and TCPView. ... Both were a big help and using TCPView I found ... > decided to call Microsoft Security Support. ... > names here) from the Microsoft Small Business Server Team found the problem ...
    (microsoft.public.windows.server.sbs)
  • Re: Site- und Inhaltsregeln im ISA2000
    ... über welches Protokoll auf welchen Server zu. ... Ggf. ... mit folgenden Tool auf Server testen: ... TCPView ...
    (microsoft.public.de.german.backoffice.smallbiz)
  • Re: Port Scanning
    ... Download and execute Sysinternal's TCPView on the affected computer. ... TCPView will give you a real-time view of the TCP connections that your ... The server is a Windows 2000 server with IIS 5.0. ...
    (microsoft.public.security)