I'm glad that you have resolution. Thanx for the feedback !
Dave
| Hi
|
| Yes, it worked. And it was the W32.Gaobot worm that took all the CPU
| (ns.exe)
|
| Thanx. It took some time to clean 2 server. But what i dont understand, is
| that both are running antivirus, and they are fully patched and with the
| lates SP. How can Gaobot infect my 2 servers then, when it uses the network
| to spread????
| Must send a harsh e-mail to my antivirus provider, to hear what they have to
| say.
|
| I allso found the source, and tomorrow am gonna beat up that mother*****
| that put his laptop on my LAN without asking me at first. AAAAHHHHHHH. I
| have been working for allmost 24 houers now, and am just going through with
| one last viruscheck.
|
| Anyway.
|
| Thanx Dave. You saved my day.
|
| -Regards
|
| -AA-
|
|
|
| "David H. Lipman" <
[email protected]> skrev i melding
| | > 1) Download the following three items...
| >
| > Trend Sysclean Package
| >
http://www.trendmicro.com/download/dcs.asp
| >
| > Latest Trend signature files.
| >
http://www.trendmicro.com/download/pattern.asp
| >
| > Adaware SE (free personal version v1.05)
| >
http://www.lavasoftusa.com/
| >
| > Create a directory.
| > On drive "C:\"
| > (e.g., "c:\New Folder")
| > or the desktop
| > (e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
| >
| > Download SYSCLEAN.COM and place it in that directory.
| > Download the Trend Pattern File by obtaining the ZIP file.
| > For example; lpt265.zip
| >
| > Extract the contents of the ZIP file and place the contents in the same
| directory as
| > SYSCLEAN.COM.
| >
| > 2) Update Adaware with the latest definitions.
| > 3) If you are using WinME or WinXP, disable System Restore
| >
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
| > 4) Reboot your PC into Safe Mode
| > 5) Using both the Trend Sysclean utility and Adaware, perform a Full
| Scan of your
| > platform and clean/delete any infectors/parasites found.
| > (a few cycles may be needed)
| > 6) Restart your PC and perform a "final" Full Scan of your platform
| using both the
| > Trend Sysclean utility and Adaware
| > 7) If you are using WinME or WinXP,Re-enable System Restore and
| re-apply any
| > System Restore preferences, (e.g. HD space to use suggested 400 ~
| 600MB),
| > 8) Reboot your PC.
| > 9) If you are using WinME or WinXP, create a new Restore point
| >
| > * * * Please report back your results * * *
| >
| > Dave
| >
| >
| >
| >
| >
| | > | Hi
| > |
| > | Got a Win2000 domain with 4 win2000 server running. (all with sp4 and
| fully
| > | patched)
| > |
| > | One of my server is very slow. Everything is taking loong time to do, if
| am
| > | gonna see the taskmanager.
| > |
| > | In Taskmanger I see that NS service is taking allmost all of my cpu
| power.
| > | (the server is running a 2 CPU with 1.3 GM RAM)
| > |
| > | When I stop the NS service the CPU drops to normal (a few %) but if I
| start
| > | it again the CPU go`s in 100%.
| > |
| > | Why is this, and how can I fix it?
| > |
| > | It worked fine for a few days ago, and I havent dont any changes with
| it.
| > |
| > | Am allso running Norman Antivirus for a few years, and that has worked
| fine.
| > |
| > | -regards
| > |
| > | -AA-
| > |
| > |
| >
| >
|
|
