Advise Required

[kintho]

Hi All, my first time on the site. Hope someone can share some light.

I have a customer server running Windows 2003, SQL, IIS and Metastorm. The server has been extremely slow over the last 3-4 weeks but during trouble shooting, Notepad can take 30sec - 1 min to load. Funny, thing is that the CPU usage remained low.

We also noticed that there was one program call QJ2A77.EXE in the task list running out of Windows/Temp. Once we stop this process, the program disappear. Once in a while a different program comes up.

My biggest problem is that the customer feels that there is no way that a virus can get in as he has scanned using McAfee. Any advise.

[Nude_Lewd_Man]

Interesting...

Typed (well, copy-pasted) the EXE into a Google search, the one and only result was this thread....

[Telos]

first of all McCafee isn't the best antivirus out there and it can't detect everything alone, try using a different anti virus you can use some of these. I've used Avira and Bitdefender and when i got really paranoid I put kaspersky on my system and I found a virus with a similar name

.exe files are usually virus files anyway according to my IT lab instructor

here's a link you can download off of
Anti-Virus Downloads - FileHippo.com

[sharder8]

first of all McCafee isn't the best antivirus out there and it can't detect everything alone, try using a different anti virus you can use some of these. I've used Avira and Bitdefender and when i got really paranoid I put kaspersky on my system and I found a virus with a similar name

McAfee . . . I probably see more infected computers running McAfee than any other AV software.

exe files are usually virus files anyway according to my IT lab instructor

YUP!! Tell your lab instructor to start with deleting every "win.exe" he runs into. I've seen virus's that run from *.exe, *.dat, *.bat, and from temp folders, Windows folder, System folder, System32 folder, and come to think about it, just about any folder on the system.

START HERE and let us know the result.

Harder

[Nude_Lewd_Man]

.exe files are usually virus files anyway according to my IT lab instructor

Oh yes indeedie..

Delete these EXE files NOW...

Explorer.exe
Win.exe
Winlogon.exe
Services.exe
Excel.exe
Outlook.exe
Word.exe
Iexplore.exe
Firefox.exe

Oh, and any Svchost.exe files too, these are all major viruses...!

[Telos]

hmm I can't do that cause dial up is too slow to run the scan and I'm 17 so I can't download the free trial thing