W32.Mocbot.A was the first one but when I ran the CA anti-viral, it found (at different times) Win32.Rbot.DSV Win32.Esbot.M
I've removed accounts from the drives that looked like they didn't belong, removed permissions on the drives that looked added, cleaned out everything I can think of and looked everywhere for how the virus got on in the first place. The machine is secure and the password is obscure. It was either network or physically added after the move to the new location. The fact that its still rebooting the machine which is disrupting service to the community is really upsetting me. :( >MIchael, > >What virus did you find originally? > >-Mark > > >-----Original Message----- >From: Michael Dinowitz [mailto:[EMAIL PROTECTED] >Sent: Friday, November 04, 2005 2:21 PM >To: CF-Talk >Subject: (OT) server rebooting after virus > > >The House of Fusion box picked up a virus somehow and even after I've >cleaned it out the box is rebooting at random times. I suspect that the >virus has put something in that causes a reboot but I can't find it. Anyone >have a clue? >This is the error message that keeps showing up in the logs: >"The previous system shutdown at 1:26:52 PM on 11/4/2005 was unexpected. " ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Logware (www.logware.us): a new and convenient web-based time tracking application. Start tracking and documenting hours spent on a project or with a client with Logware today. Try it for free with a 15 day trial account. http://www.houseoffusion.com/banners/view.cfm?bannerid=67 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:223276 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
