Networks

Ask something
Question Locked

email worm

0 helpful
4 replies

by mnghishekwa

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi

I am the admin for the Electoral Commission of Namibia. Two Months ago were where attacked my a virus that disabled the Active Directory. I managed to get it under control with Karspersky Open Business suite. After having detected and deleted all viruses from the server and workstations, users finally managed to log in. At present I have two problems. One my network in extremely slow, and most of off users have received complaints that several copies of the same message is received after initial writing.

Kaspersky does not detect anything when scanning the mail boxes. How can I identify the type of virus. Please HELP!!

4 replies

by thumbsup2

What is the OS on the server?

What version of Kaspersky?

Are you running anything else to prevent infection?

by oh smeg

So start off with the easy things install WireShark and monitor your Network Traffic for starters

http://www.wireshark.org/download.html

It's directions for use are located here

http://www.wireshark.org/docs/

As for the individual workstations they need to be scanned in [b]Safe Mode[/b] and with some Malware Scanners like Malware Bytes

http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=mncol&cdlPid=10878968

Not just an AV Scanner. ;)

Col

by mnghishekwa

Thanks for the advices.

Oh, I have a mixed Windows environment of Server 2000, 2003 and 2008. However the machine with the activate directory is Server 2000.

This discussion is closed to new replies.