The virus tag has no wiki summary.
0
votes
1answer
81 views
Critical Virus infection with PHP website. What are the options to remove Virus? [closed]
Possible Duplicate:
My server's been hacked EMERGENCY
I have a critical virus infection to one of my website.
There is a additional script found added at footer of few web pages . the ...
0
votes
2answers
106 views
How to remove .htaccess virus [closed]
Possible Duplicate:
My server's been hacked EMERGENCY
All Subdomain folder with root folder they write a .htaccess file with this code
<IfModule mod_rewrite.c> ...
7
votes
3answers
275 views
Can a virus spread through a network share used by an RDP connection?
When connecting to a Windows Server (2003 or 2008) desktop through RDP from a local Windows (7 or XP) PC with networks shares enabled (usually, the local C: disk will be shared with the remote ...
9
votes
3answers
148 views
Postfix sending and receiving the same e-mail every 5 minutes for 4+ months
Back in June I sent myself the EICAR test signature to make sure my postfix/amavis/spamassassin etc setup was working properly. I didn't notice at the time, but this somehow created a tear in the ...
0
votes
2answers
76 views
Trojan of Web-server [closed]
Possible Duplicate:
My server's been hacked EMERGENCY
In our web-server most of the sites are infected with this JS-Downloader Trojan. It injected the following code. I've tried to ...
2
votes
2answers
149 views
Possible malware on my server, how to search the source?
Some users of one of our blogs have detected that when loading the page under Windows with antivirus such as Avast or NOD32 a message appears.
The message is something like
"The remote address has ...
2
votes
1answer
1k views
Detecting Torpig on a LAN
I am responsible for the oversight of the LAN at a college campus. Recently we started getting blacklisted by CBL because someone on our LAN is infected with Torpig (AKA Anserin). The suggestion ...
3
votes
3answers
105 views
Training High School Students on Security - What harmless “viruses” can I install that they can find?
I'm training some high school students interested in OS security (specifically, Windows Server 2003/2008), and though I've gone over a lot of the "in-theory" stuff, some hands on would be great. ...
0
votes
2answers
158 views
Strange email coming from/to my computer
I'm running smtp4dev on my machine to trap anything going in/out of my computer on port 25 for testing purposes. Every so often this email gets trapped and I have no idea what it's from. I have ...
0
votes
1answer
156 views
Symantec Endpoint Protection Virus Definitions
I have done some Googling but I cannot get a definitive answer certainly not from the Symantec KB.
I have a Virtualised Win 2003R2 server 32bit.
It has been provisioned to me with Symantec Endpoint ...
0
votes
2answers
64 views
Host File Redirect From Virus
I have a clients laptop that is doing the redirect of web pages to other sites.
I have run HitManPro and Combofix and they didn't come up with anything major. There is no proxy set in Internet ...
0
votes
3answers
78 views
Dedicated Server hit with viruses
Since setting up my dedicated server I have been hit with many viruses. 1 would eat up my bandwidth and another is currently sending out trojans to any outgoing mail from my mail server.
Is there a ...
1
vote
0answers
83 views
Scan a NAS Device with Microsoft Forefront Endpoint Protection
We are having problems with viruses sneaking through our virus scanner and onto our NAS and I want to scan the whole NAS. If I attempt to run a scan on the whole drive using the GUI for Forefront ...
0
votes
1answer
121 views
windows xp home security Trojan.FakeAlert - virus/scareware/malware
We have just had our second outbreak of a variant of the Windows XP home security malware (malwarebytes called it Trojan.fakeAlert). It manages to kill our antivirus (nod 32), and then kill attempts ...
1
vote
2answers
132 views
addthis_widget detected as virus
We use sunbelts VIPRE enterprise systems, and I was alerted to almost every computer in the company having this and being quarantined.
Is anyone familiar with addthis_widget.js. It detects it as a ...
-1
votes
2answers
127 views
cann anyone solve this questino? [closed]
Routers on the internet never forward packets coming from private IP addresses Explain. Can you see any advantage in this?
0
votes
1answer
215 views
How Can I Disable \PIPE\svcctl in Group Policy?
This is more of a networking question than a programming question. There is a virus running amok on our network at work and it seems to be taking down our servers. I have determined that the virus ...
2
votes
3answers
101 views
Avoiding viruses 101
I'm looking to send out an email to my users to give them advice on avoiding getting viruses and phishing emails.
I've found http://www.sonicwall.com/furl/phishing/ which is a bit dated and is ...
8
votes
1answer
544 views
Unusual HEAD requests to nonsense URLs from Chrome
I have noticed unusual traffic coming from my workstation the last couple of days. I am seeing HEAD requests sent to random character URLs, usually three or four within a second, and they appear to be ...
2
votes
4answers
120 views
Virus blocking incoming connections?
On my Windows Server 2003 server, all incoming connections are dropped. I can see them getting in using Wireshark, but even a single ping from another computer fails.
All locally initiated connection ...
1
vote
3answers
165 views
Force Apache2.2 to drop a request
Long story short we recently had an account on one of a shared hosts compromised, the issue has been resolved but the affected account is still being spammed with over a million requests a day to a ...
2
votes
3answers
181 views
What would you do when a worm infects everything?
Ive always wondered, what can we do if a virus or worm happens to affect the main file server?
What if from the file server the clients get infected by said worm/virus?
How would you clean it up? ...
0
votes
1answer
128 views
Possible causes for Domain server being unavailable? [closed]
Possible Duplicate:
Reinstall after a Root Compromise?
One of our servers was compromised after a user with administrative privileges accidentally loaded a virus from a USB drive on a ...
0
votes
3answers
59 views
What options do I have for virus protection on windows server 2008 (this server is not a mail server)?
I would like to use some kind of virus protection on the server. What options do I have? I installed MS security essentials, but I just learned that I is not for commercial/government use.
0
votes
3answers
122 views
DirectAdmin Centos4 server has virus
I have a problem with a webserver that runs Centos4 with DirectAdmin.
Since a few weeks some websites hosted on it are not redirecting on search engines properly, they are redirected to some malware ...
0
votes
1answer
401 views
the specified domain either does not exist or could not be contacted [closed]
what to do with this message?
0
votes
1answer
260 views
vi.recover/update command appears every minute in cron log. (POSSIBLE VIRUS)
UPDATE (7th Dec 2010) & WARNING: I copied the files discussed below (from the /var/tmp/vi.recover directory) to my Windows PC and sacnned with ESET NOD 32. It identifed two of the file (sshd: and ...
0
votes
2answers
350 views
Removing VirTool:Win32/VBInject.gen!DG
i get this little bugger poping up every start up, my microsoft security essentials stops initial attempt and there no threat till next start up. I was wondering, if there any tools to check and ...
2
votes
1answer
78 views
Looking to build a lab to help students to combat the Sasser Virus? Does anyone know where I can get a copy of the virus? [closed]
Looking to build a lab to help students to combat the Sasser Virus? Does anyone know where I can get a copy of the virus?
1
vote
2answers
132 views
Search result redirect virus
I'm stumped. I'm up against a virus on a desktop PC that has hijcaked all search results (Google, Yahoo!, Bing, etc.) in both IE and Firefox, and it happens to both accounts that log into the ...
1
vote
5answers
163 views
I believe I have a virus in my server!
For the past few weeks I have been noticing the code in my index.htmls on my host, changing by it self. The other day Chrome and Firefox have started to list the sites hosted on my server as attack ...
1
vote
3answers
317 views
how i can write test virus?
i have a website and in website some people can upload files .... and when user upload file it must scan from virus by antivirus ... so i need test virus have the following extention (.doc ,jpg, png, ...
0
votes
1answer
51 views
What is the expamapi.dll in windows folder?
I'm getting a virus message related to expamapi.dll in c:\Windows (windows xp). When I used ProcessExplorer, this dll is related to a bunch of processes, which isn't making sense. Some of the ...
0
votes
2answers
134 views
Windows 2003 Server monitoring tool for file writing
I am having a bit of a trojan problem.
We have a Windows 2003 Server configured with a partition for file sharing for backup purposes.
In our network there are about 50+ computers with access to these ...
0
votes
1answer
294 views
Ubuntu, Samba, Shared folders and unknown files
I am using ubuntu on my laptop with a EDGE connection. I have no computers on my LAN.
First time this happened as a coincidence when i left a folder shared after office on my laptop and found it ...
1
vote
3answers
145 views
Need help controlling viruses
I've recently noticed an increase of viruses on my systems. We employ CA eTrust 8.1 for antivirus and all users are "Domain Users", and thus should not have access to install any software on their ...
0
votes
4answers
303 views
Website has links to Malware, Caused by virus
The computer that I do my most webdevelopment work with caught a virus. A website that I am currently working on was compromised(I think by phpDesigners stored FTP password).
I currently get :
...
0
votes
4answers
317 views
Exchange 2007 server send out spam
Our exchange server is sending out spam, as it has been listed on various spam blacklist and not to sure know how to stop it.
I've started with verify SMTP with a site like ...
0
votes
1answer
119 views
hiden iframe unescape
started helping a company with a web site a few days ago... i notices some strange code in some html and php files on the server:
...
1
vote
2answers
103 views
Infected Windows File Server, should we clean or wipe?
I'm troubleshooting a friend's Windows 2k3 file server (that I had setup for them a few weeks ago). It got infected by a tenga.gen virus and he's trying to clean it now but doesn't have a server ...
2
votes
5answers
173 views
Opinion question about security viruses and HTML attachments
In the last couple of weeks my company has been inundated by a group of viruses including an .html attachment. Some of these were subjected UPS shipment, some Western Union. All of them asking the ...
0
votes
1answer
116 views
Can i remove the virus from website scripts from unix shell
My website is infected with iframe injection and some javascript virus.
There is some JS code which is present in all the files.
Is there any way that i can paste that JS code in a text file and ...
0
votes
1answer
157 views
outgoing DNS flood targeted to non-ISP hosts
Below is the specific traffic monitored at the network perimeter and originating from a user PC on Vista platform.
My question is not about the effects of the flood, but about the nature of the ...
1
vote
3answers
1k views
Ubuntu Server attack? how to solve?
Something (Someone) is sending out UDP packets sent from our whole ip range. This seems to be multicast DNS.
Our server host provided this (Our IP Address is masked with XX):
Jun 3 11:02:13 ...
0
votes
1answer
51 views
/manual/cache folder on my server?
On our site's server, once managed by someone who's no longer with us, there's a folder named "/manual/cache" which contains txt files named+like+this, mostly using pornographic-related keywords. The ...
0
votes
2answers
73 views
How to remove this attack from the server?
Hey Guys
I have made website.
But after few months successfully run now its showing virus attack.
Now how to remove this things?
And what to do to avoid this attacks in future?
I have put screen-shot ...
0
votes
3answers
683 views
My website is infected with JS:ScriptIP-inf [Trj]
I am using Network Solutions hosting. I was recently attacked with JS:Illredir-S [Trj], I asked my hosting providers to clean it and they cleaned it and updated all passwords, but now after a week my ...
2
votes
5answers
1k views
Virus sending phishing emails through exchange server
It appears that there is a virus on my network somewhere that is sending phishing emails through my exchange server. I can see the messages in message tracking and I see many SMTP errors for NDR's and ...
0
votes
1answer
347 views
Wine and windows virus
Does installing wine pose a risk of virus infection?
I'm afraid a powerful virus can bypass wine sandbox and gain access to root linux.
Thank you.
0
votes
1answer
410 views
fast way to find network user computer on domain hogging all wan bandwidth
i have a network of about 40 domain users and i have huge latency wan issues, like 1400ms for google.com pings. I have noticed that the problem goes away after everyone goes home for the day. I would ...
