Question

Locked

email worm

By mnghishekwa ·
Hi

I am the admin for the Electoral Commission of Namibia. Two Months ago were where attacked my a virus that disabled the Active Directory. I managed to get it under control with Karspersky Open Business suite. After having detected and deleted all viruses from the server and workstations, users finally managed to log in. At present I have two problems. One my network in extremely slow, and most of off users have received complaints that several copies of the same message is received after initial writing.

Kaspersky does not detect anything when scanning the mail boxes. How can I identify the type of virus. Please HELP!!

This conversation is currently closed to new comments.

4 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

More info needed.............

by ThumbsUp2 In reply to email worm

What is the OS on the server?

What version of Kaspersky?

Are you running anything else to prevent infection?

Collapse -

OK this has to be a Windows Based System

by OH Smeg In reply to email worm

So start off with the easy things install WireShark and monitor your Network Traffic for starters

http://www.wireshark.org/download.html

It's directions for use are located here

http://www.wireshark.org/docs/

As for the individual workstations they need to be scanned in Safe Mode and with some Malware Scanners like Malware Bytes

http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=mncol&cdlPid=10878968

Not just an AV Scanner.

Col

Collapse -

email worm

by mnghishekwa In reply to OK this has to be a Windo ...

Thanks for the advices.

Oh, I have a mixed Windows environment of Server 2000, 2003 and 2008. However the machine with the activate directory is Server 2000.

Back to Networks Forum
4 total posts (Page 1 of 1)  

Related Discussions

Related Forums