Cannot see other two servers

  • Thread starter Thread starter Jamal Mubarik
  • Start date Start date
J

Jamal Mubarik

Hi:
We have three servers. A, B & C. C is hosting Microsoft exchange 2000. Every
thing was fine until we were invaded by trojan/s. I found dame ware
utilities and deleted them from registry.

Now I cannot see Sever A & B from DNS manager. It cannot find server A or B.
I can see server C from A & B in DMS management console. Furthermore I
cannot map a drive to Server C from A & B or Map a drive from C to A & B. I
can ping every server from each other and get DQDN.

The trojan had disabled Computer Browser and netlogon service in Hkey
Local/microsoft/run key. IPC$ share also keeps disappearing. I restart it by
typing net share IPc$ and still DNS server cannot see server A & B.

I thank you for your time.

Jamal
 
In
Jamal Mubarik said:
Hi:
We have three servers. A, B & C. C is hosting Microsoft exchange
2000. Every thing was fine until we were invaded by trojan/s. I found
dame ware utilities and deleted them from registry.

Now I cannot see Sever A & B from DNS manager. It cannot find server
A or B. I can see server C from A & B in DMS management console.
Furthermore I cannot map a drive to Server C from A & B or Map a
drive from C to A & B. I can ping every server from each other and
get DQDN.

The trojan had disabled Computer Browser and netlogon service in Hkey
Local/microsoft/run key. IPC$ share also keeps disappearing. I
restart it by typing net share IPc$ and still DNS server cannot see
server A & B.

I thank you for your time.

Jamal
Click to expand...


You'll have to either recreate the reg keys that were altered or restore
from a backup (hopefully you have a backup?). The browser service MUST be
running, assuming you want to "SEE" the machines in network neighborhood. SO
you must re-enable this service as an auto startup. Need to run a complete
antivirus, anti-spyware and anti-trojan scan on your machines... and keep
them updated at all times.



--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS-IS" with no warranties and confers no
rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
In
Jamal Mubarik said:
Hi:
We have three servers. A, B & C. C is hosting Microsoft exchange
2000. Every thing was fine until we were invaded by trojan/s. I found
dame ware utilities and deleted them from registry.

Now I cannot see Sever A & B from DNS manager. It cannot find server
A or B. I can see server C from A & B in DMS management console.
Furthermore I cannot map a drive to Server C from A & B or Map a
drive from C to A & B. I can ping every server from each other and
get DQDN.

The trojan had disabled Computer Browser and netlogon service in Hkey
Local/microsoft/run key. IPC$ share also keeps disappearing. I
restart it by typing net share IPc$ and still DNS server cannot see
server A & B.

I thank you for your time.

Jamal
Click to expand...

It is hard to tell what all the trojan did, what trojan was it?
Did it alter the hosts file?
 
Back
Top