Virus Blocked network services

[Saroth PHOENG]

Dear Barcampp,

 

I use Window 2003 server as an Email and Files server sharing to my workgroups network to the other PCs using WindowXp Proffessional,

 

Now, I faced a kind of virus which attack on the Server, when this virus attack, the server can’t connect to the other PCs on the network,

It means that all the network traffic blocked, so I cannot Use the Email and files sharing from the server any more.

 

So if all of you had solved this problems, Please help me,

 

 

Thanks,

 

 

[Phearoun]

Any messages appeared when you log in from client to sheared folder on server?

បានសរសេរ Saroth PHOENG:

[Saroth PHOENG]

 

This Meassage appared when I access files sharing from the Client PCs to Server althought I start Workstation and Server Services both Client, Server.

 

 

 

 

 

 

 

 

 

 

 

Message appared when I ping from the Client PCs to Server. And from the Server ping to client it display message replay as Destination host unreachable

 

 

 

 

 

 

 

 

 

 

Thanks for your Reply,

 

 

 

---

[Sithuoth PRAM]

Dear Saroth,

 

From my understand your message, did you have try test your PC?, start with all services, start->run->msconfig and go to services tab and tick all services, and restart your machine, and try test to access to sharing files again.

 

This my idea to participate this problem.

 

Cheer,

[Saroth PHOENG]

Dear Sithout,

 

All the services in services tab of Msconfig are enabling,

 

Still now I am not sure that it came from the Virus or services blocked (Group policy or Reedit key)

 

Thanks all, for your supporting

 

                                                                 

PHOENG Saroth

System Engineer Team leader

Co        : FirstCambodia Co., Ltd,

Be        : saroth...@first-groups.com

Hp        : 016 322 012 / 089 455 500

All in Touch

 

---

<br

[seth chanratha]

Hi All, I'm not sure this problem related to Virus or Service of Msconfig but I have experience with it and solved it by right click on My Network Places on Desktop then select Disconnect Network Drive... and select which drive that you want to disconnect then Map network drive again. I think it will working possibly with network. --- On Wed, 10/28/09, Saroth PHOENG <saroth...@gmail.com> wrote:

--~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "BarCamp Phnom Penh" group. To post to this group, send email to barcampp...@googlegroups.com To unsubscribe from this group, send email to barcampphnompe...@googlegroups.com For more options, visit this group at http://groups.google.com/group/barcampphnompenh?hl=en?hl=en -~----------~----~----~----~------~----~------~--~---

[Saroth PHOENG]

Dear Chanratha,

That is not the problem came from it, I can’t not access to files sharing (\\IP_server )on the network at all because network not worked yet.

 

Thanks for your help,

 

 

---

[Norbert Klein]

Don't know about about solving your Windows server problem - using
Linux we, of course, never had a Virus problem.


Norbert

--
Norbert Klein
nhk...@gmx.net - always use this for responses
Phnom Penh/Cambodia

[Paul Harper]

I have the same problem as Norbert with OpenSolaris. The viruses don't work automatically like they do on Windows. I have even tried wine.

http://www.linux.com/archive/feature/42031

I can't remember seeing a virus on a Linux or Solaris machine since 2001 when I first switched to Debian. Overall it is too much trouble to make a virus work so I have to live without them.


Regards,

Paul


"Flags are bits of colored cloth that governments use first to shrink-wrap people's brains and then as ceremonial shrouds to bury the dead." Arundhati Roy (Author) http://www.weroy.org/index.shtml


--- On Thu, 29/10/09, Norbert Klein <nhk...@gmail.com> wrote:

> From: Norbert Klein <nhk...@gmail.com>
> Subject: [barcamppp] Re: Virus Blocked network services
> To: barcampp...@googlegroups.com

__________________________________________________________________________________
Get more done like never before with Yahoo!7 Mail.
Learn more: http://au.overview.mail.yahoo.com/

[Phearoun]

hello Saroth,

there are many Windows experts at  http://khmeritforum.net
i hope they can help u

[Saroth PHOENG]

Dear Phearoun,

 

Thanks for your support, now I still faced it I can’t do any more with this server.

But foe the Saft Mode with network configuration, Network properly access.

 

Thanks,

 

[Phearoun]

បានសរសេរ Saroth PHOENG:

Dear Phearoun,

 

Thanks for your support, now I still faced it I can’t do any more with this server.

But foe the Saft Mode with network configuration, Network properly access.

so this mean that your server has been attacked by virus.
check it to find out what virus LIVING :) in your server in Registry as the following :
-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\run
-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\run
-HKEY_USERS ----> choose option 7th ---> then go to \Software\Microsoft\Windows\CurrentVersion\run

also check the current program running in ur system
-HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache
-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\ShellNoRoam\MUICache
-HKEY_USERS ----> choose option 7th ---> then go to \Software\Microsoft\Windows\ShellNoRoam\MUICache

be careful, don't delete anything that you are not sure.

good luck

[OK KIM SIEN]

--- On Wed, 10/28/09, Norbert Klein <nhk...@gmail.com> wrote:

From: Norbert Klein <nhk...@gmail.com> Subject: [barcamppp] Re: Virus Blocked network services To: barcampp...@googlegroups.com

[chhunly chhorn]

Hi there,

I am not sure about your problem, But I interest to know what kind of virus that you have mention. I also controlling file server at my company but I have never met the problem as you have said. So I am not sure because I use Kaspersky to ban it to go into my system or you have other problem. That is why I interest to share with you about this problem.

Cheers,
Chhunly

On Wed, Oct 28, 2009 at 9:26 AM, Saroth PHOENG <saroth...@gmail.com> wrote: