Abyss command prompt virus server meltdown?

 
Post new topic   Reply to topic    Aprelium Forum Index -> General Questions
View previous topic :: View next topic  
Author Message
Lobsterkins
-


Joined: 03 Oct 2003
Posts: 16

PostPosted: Sun Oct 23, 2005 8:01 pm    Post subject: Abyss command prompt virus server meltdown? Reply with quote

So, something strange has happened with my Abyss webserver.

I've been running it for the past two years, and it's fantastic -- fast, easy, excellent.

I hopped onto my server machine yesterday, and I noticed that maybe 6 or 7 DOS command prompt windows were open. I didn't take the time to see what they read, but the most prominent one seemed to be doing something with the Abyss webserver executable.

I reset my server and went to sleep.

Woke up this morning, and I can no longer logon to my server computer, running Windows 2000 Professional. I get to that "Log On To Windows" screen (with the blue background), enter the information that I know to be correct, and it still doesn't let me log on to my server.

What should I do in this situation? Just reformat and reinstall all the server data?

Also, in the future, how might I better protect my server from (what I assume was) a hijack? I wasn't even running a firewall or antivirus on my server.
Back to top View user's profile Send private message
Anonymoose
-


Joined: 09 Sep 2003
Posts: 2192

PostPosted: Sun Oct 23, 2005 8:06 pm    Post subject: Reply with quote

Do you have Automatic Updates enabled? The lastest round (October) of critical fixes have totally hosed some peoples systems with exactly the symptoms you describe (know you have the right password, can't log in)

Outside of this, do you have your server PC connected directly to the net via a modem, or do you use a router? Running a Windows PC connected directly to the net with no firewall is nigh on suicidal these days...
_________________

"Invent an idiot proof webserver and they'll invent a better idiot..."
Back to top View user's profile Send private message
Lobsterkins
-


Joined: 03 Oct 2003
Posts: 16

PostPosted: Mon Oct 24, 2005 6:15 am    Post subject: Reply with quote

Heya, thank you for the reply.

The server was connected to the modem as such: a cable modem > a Linksys BEFSR11 router > a little NetGear hub.

I imagined the BEFSR11 was providing the bulk of the server's security; however, I hadn't installed a virus scanner on the server or a software firewall (bad move, if I can get back on there, I'm gonna install both).

Yes, the Windows 2000 Automatic Updates were enabled, and I'd installed them all.

So, I have no idea what to do now! Still can't get on. Any ideas?
Back to top View user's profile Send private message
aprelium
-


Joined: 22 Mar 2002
Posts: 6800

PostPosted: Mon Oct 24, 2005 7:02 am    Post subject: Re: Abyss command prompt virus server meltdown? Reply with quote

Lobsterkins,

Abyss Web Server apparently is not the only software running on your computer. So there are several other possible causes of the problem you describe.

In order to ensure that there isn't anything wrong with the server, check you access.log file. If you do not know how to do that, contact us and we'll review it for you.
_________________
Support Team
Aprelium - http://www.aprelium.com
Back to top View user's profile Send private message Send e-mail
Lobsterkins
-


Joined: 03 Oct 2003
Posts: 16

PostPosted: Mon Oct 24, 2005 7:36 am    Post subject: Reply with quote

Aprelium, I can't logon to Windows 2000 to view the access.log file.

That there is my problem, as it currently stands: I cannot log on to Windows 2000, and I know for a fact I am entering the correct password. It's never asked me for the password before (it just automatically logs on to Windows 2000).
Back to top View user's profile Send private message
Anonymoose
-


Joined: 09 Sep 2003
Posts: 2192

PostPosted: Mon Oct 24, 2005 8:08 am    Post subject: Reply with quote

Lobsterkins,

http://news.com.com/Critical+Windows+patch+may+wreak+PC+havoc/2100-1002_3-5896041.html

Quote:

A Microsoft patch meant to fix critical security flaws in Windows 2000, Windows XP and Windows Server 2003 is causing trouble for some users, the company said Friday.

The patch was released Tuesday to fix four Windows flaws, including one that experts predict will be exploited by a worm in the coming days. The flaw, tagged "critical" by Microsoft, lies in a Windows component for transaction processing called the Microsoft Distributed Transaction Coordinator, or MSDTC.

Installing the patch can cause serious problems, Microsoft said in an advisory posted to its Web site Friday. The patch could lock users out of their PC, prevent the Windows Firewall from starting, block certain applications from running or installing, and empty the network connections folder, among other things, the software maker said.


The patch is KB896688 and it's totally hosed Windows Installer on my PC twice now... http://support.microsoft.com/kb/909444 describes some of the problems the patch may cause.

Quote:
Authenticated users cannot log on, and a blank screen appears after the users apply the October Security Updates.


Microsoft are their ever helpful selves on this front. It mentions you may not be able to log on then suggests changing file permissions to fix it. For which you'd need to log on. Great.

Are you able to access your PC from another network PC, if you have one?
_________________

"Invent an idiot proof webserver and they'll invent a better idiot..."
Back to top View user's profile Send private message
Lobsterkins
-


Joined: 03 Oct 2003
Posts: 16

PostPosted: Mon Oct 24, 2005 10:43 am    Post subject: Reply with quote

The Microsoft "resolution" to this problem was not only unreadable, but solved nothing. Hey Microsoft, I CAN'T LOGON TO WINDOWS TO FIX THE PROBLEM OF NOT BEING ABLE TO LOGON TO WINDOWS.

And no, I can't access the computer with the PC. I just tried using the Recovery Console, and I tried logging on to C:\WINNT. The Recovery Console then asked for my administrator password -- sure enough, my old password still worked!

Is there anything I can do from the Recovery Console to reset permissions or change the Administrator username and password?
Back to top View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Aprelium Forum Index -> General Questions All times are GMT + 1 Hour
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB phpBB Group