Jump to content

Unknown infection


Recommended Posts

We have a dozen or so machines, servers and clients, that have something on them that is continually flooding our connection outbound with the best I can say is RDP traffic. Right now the biggest problems comes from servers that we have that send out the traffic on port 4935 to destination IP's on their 3389 port. Malwarebytes has not been able to find the problem nor Symantec, nor MicroTrends HouseCall, nor Security Essentials. The DDS will not run on Server 2003, but I do have the ark.txt and I put hijackthis txt in the zip file.

ark.zip

Link to post
Share on other sites

  • Root Admin

This appears to be a business from your description - please contact corporate support and they can work with you.

http://www.malwarebytes.org/support/commercial

Though initially without knowing more it looks like you might be under some type of Denial of Service Attack

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.