+ Post New Thread
Results 1 to 2 of 2
Windows Server 2008 R2 Thread, w32/sality-am and cxmal/pifpad-A in Technical; hi all i have recently taken over working as NM at a large primary in my local area and im ...
  1. #1

    Join Date
    Jan 2011
    Thank Post
    Thanked 1 Time in 1 Post
    Rep Power

    w32/sality-am and cxmal/pifpad-A

    hi all

    i have recently taken over working as NM at a large primary in my local area and im having problems

    my sql server/sims server has w32/sality-am and cxmal/pifpad-A and so does my primary domain controller

    there both s2008 r2 64 bit and both have sophos end point security on and im struggling to get rid of them

    sophos is useless at this point i want to remove the threat but with out taking the servers off line as my main dc does just about everything

    has anyone else got any suggestions of how to remove it i have tried obviously sophos, msert, slty.exe and all make no difference or even see the virus



  2. #2

    CHR1S's Avatar
    Join Date
    Feb 2006
    Thank Post
    Thanked 500 Times in 307 Posts
    Rep Power
    Turns off anti virus applications
    Deletes files off the computer
    Records keystrokes
    As a matter of urgency I would be taking down both servers, booting to safemode or a PE and running a full virus scan/hijackthis/spybot etc etc.

    Whats the point of keeping the servers up if you have no idea what sensitive information they are capturing, sending or deleting?

+ Post New Thread

Similar Threads

  1. First day of use in anger and... I am angry
    By Simcfc73 in forum Windows 7
    Replies: 32
    Last Post: 29th July 2009, 09:36 AM
  2. mini macs and midi
    By russdev in forum Mac
    Replies: 7
    Last Post: 29th November 2005, 03:08 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts