Jump to content

Server tries to open FTP connection to China on login


Recommended Posts

Good morning all.

 

I have a problem with our AD server at my place of work. We've just dealt with what appeared to be a Conficker infection (how is that still getting around? I could've sworn we were fully patched) however it seems now, whenever I log in directly to the server, NOT when logging in to a workstation, the server opens a CMD window and attempts to download an executable file from a server in China via FTP, however it never actually downloads the file.

 

The server is also restarting at around 12:10am every day, even though there is nothing set in Task Scheduler to cause this.

 

Could anybody help me to finally remove this?

 

Many thanks

Luke Harrison

 

(P.S. Please fine enclosed a screenshot of the attempted file download)

 

post-175790-0-27077000-1413791362_thumb.

Link to post
Share on other sites
  • 1 month later...
  • 3 weeks later...

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Archived

This topic is now archived and is closed to further replies.

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.