Weird problem

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have a windows server SP4 that is running exchange 2000 SP3. I recently rebuilt the server and reinstall exchange 2000. This is also my DNS server and it points to itself and configure to forward to a local ISP. The workstation use this DNS as the preferred DNS. The server runs for about 10 to 15 minutes and no one can access it. The server seem to have a virus but I had scrub abd rescrub that server so many time with the latest virus definitions files from Sophos and found nothing. I have installed every patch and fixes still the server would work for about 30 minutes and then the router would indicate high activity. Noone can access the internet or the exchange server. If I unplug the server, every thing is fine

Can you help
 
Falcontwo said:
I have a windows server SP4 that is running exchange 2000 SP3. I recently
rebuilt the server and reinstall exchange 2000. This is also my DNS server
and it points to itself and configure to forward to a local ISP. The
workstation use this DNS as the preferred DNS. The server runs for about 10
to 15 minutes and no one can access it. The server seem to have a virus but
I had scrub abd rescrub that server so many time with the latest virus
definitions files from Sophos and found nothing. I have installed every
patch and fixes still the server would work for about 30 minutes and then
the router would indicate high activity. Noone can access the internet or
the exchange server. If I unplug the server, every thing is fine.
Can you help

I recommend you scan your server with an external virus scanner, e.g. on
www.antivirus.com ("free online scan").

I would also install a sniffer such as Ethereal to find out what's going on
during the high router activity. Do you have a firewall?
 
I will try the online scan I will have to reboot the server and the internet will come back for a while. I do not have a firewall. I wil be installing one very soon
 
Falcontwo said:
I will try the online scan I will have to reboot the server and the
internet will come back for a while. I do not have a firewall. I wil be
installing one very soon

Running a server without a firewall is asking for trouble.
 
HI There I ran the scan form www.antivirus.com and it found the nachi virus. The system worked fior about 3 maybe 4 hours and now its down again. I will install teh Sygate Personal Firewall pro as a temporary fix until I get a cisco pix. I will run the scan again
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top