|  Login
July 23, 2008  
Blog
Minimize
You must be logged in and have permission to create or edit a blog.
  
 
Search
 
Rbot.aja worm exterminated
Minimize
Location: BlogsLiving in Software Development    
Posted by: host 2/27/2007 10:41 PM

I put in a support call with my host and I just got a cheery response.

Unfortunately, your server has already been compromised.  We found WINNT/system32/rdriv.sys.  The rdriv.sys is the Rbot.aja worm.  The only recourse, at this point, is to reload your operating system on a new primary hard drive.

The virus attacks a weakness in the SMTP service in older versions of Mailenable. The search has come to an end and the misbehaving of applications will cease.

Permalink |  Trackback

Your name:
Title:
Comment:
Add Comment   Cancel 
Blog
Minimize