Possible Virrus??

  • Thread starter Thread starter Ken
  • Start date Start date
K

Ken

We have a about 5 customers within the last 24 hours who have called with
similar problems on their machines. 4 Machines are Windows 2000 Server
running is TServer Application Mode and 1 is a Windows 2000 Pro machine. We
support a program written in MSAccess. MSAccess pops up the following error
message, "A problem occurred while Microsoft Access was communicating with
the OLE server or ActiveX Control." when started, even when starting it just
by itself. MS KBase says something about Norton's script blocker could cause
the problem but 2 of the 5 machines aren't running ANY antivirus. Also, they
can't browse www.windowsupdate.com nor can they get into Add/Remove
Programs. Control Panel itself lists everything in the left side of the
listbox selection where the normal links for windowsupdate and Windows 2000
support links are and nothing is on the right hand side. They can browse
other websites fine. Add/Remove pops up but its completely blank except for
the close button and 'Change or Remove Add New Add/Remove Windows' in TEXT
at the top of the window. The computers respond slower than normal yet the
task manager lists 'System Idle Process' hovering around 90%. Free antivirus
webscans from McAfee and Trendmicro detected MSBlaster on one of the
machines but the others came up clean. Rebooting the server 'fixes' the
MSAccess problem for a little while. Any ideas?
 
After 2 days of trying to fix this..... Anyway, Symantic as 'clean' tool
for this lousy virus! but I had to run twice. Also, let me get into MS
patch but still not sure its all ok.
 
UPDATE! We applied the MS03-026 patch on the one machine that DID have
msblaster and upon reboot MSAccess, windowsupdate, Control Panel, and
Add/Remove Programs worked. We then installed the MS03-026 patch on the
other 3 servers and one workstation even though those machines had NO
visible infection of msblaster in winnt/system32, registry, or in memory.
Upon reboot everything else is back to normal. There *may* another variation
or completely new virus in the wild exploiting MS03-026.
 
1) Norton Viruscan was not real successful in finding it
2) They have a cleaner on their web page which worked.
3) to overcome the issue of timing out before I could download, someone
suggested I reset Properties of first RPC file in Admintools->Services to
'take no action' on the 3 options listed under 'recovery'. This worked.

I ran the cleaner (1st disabled Windows Restore) a couple of times. Checked
everything out & reset everything I had changed.

Also updated virus definitions as this thing seems to be everywhere!
 
Ken said:
We have a about 5 customers within the last 24 hours who have called with
similar problems on their machines. 4 Machines are Windows 2000 Server
running is TServer Application Mode and 1 is a Windows 2000 Pro machine. We
support a program written in MSAccess. MSAccess pops up the following error
message, "A problem occurred while Microsoft Access was communicating with
the OLE server or ActiveX Control." when started, even when starting it just
by itself. MS KBase says something about Norton's script blocker could cause
the problem but 2 of the 5 machines aren't running ANY antivirus. Also, they
can't browse www.windowsupdate.com nor can they get into Add/Remove
Programs. Control Panel itself lists everything in the left side of the
listbox selection where the normal links for windowsupdate and Windows 2000
support links are and nothing is on the right hand side. They can browse
other websites fine. Add/Remove pops up but its completely blank except for
the close button and 'Change or Remove Add New Add/Remove Windows' in TEXT
at the top of the window. The computers respond slower than normal yet the
task manager lists 'System Idle Process' hovering around 90%. Free antivirus
webscans from McAfee and Trendmicro detected MSBlaster on one of the
machines but the others came up clean. Rebooting the server 'fixes' the
MSAccess problem for a little while. Any ideas?
Click to expand...
 
Back
Top