IIS Problem After A Virus Attack
Printed From: Web Wiz Forums
Category: General Discussion
Forum Name: Classic ASP Discussion
Forum Description: Discussion on Active Server Pages (Classic ASP).
URL: https://forums.webwiz.net/forum_posts.asp?TID=23974
Printed Date: 29 March 2026 at 6:48am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: IIS Problem After A Virus Attack
Posted By: Praveen
Subject: IIS Problem After A Virus Attack
Date Posted: 27 July 2007 at 7:30pm
|
Hi Friends,
I had an attack of a Virus named: New Malware.J from Yahoo! Messenger and I have rectified it using some tools namely:
HijackThis!
ComboFix
VundoFix
SmithFraudFix
PolicyFix
And what now is! My system's fine. My IIS ASP is working. But when anything connected to Jet Database!! It shows an error:
And our WebWiz Forums?? It shows error like this:
So Please help me friends. This is my only support.
Thanks. ------------- 
|
|||||||
Replies:
Posted By: iSec
Date Posted: 28 July 2007 at 2:46am
|
Sounds like the virus infected a file that is part of IIS and when your tools deleted the infected file IIS could not function properly...
I suggest that you re-install IIS to recover whatever file was deleted. ------------- "When it gets dark enough, you can see the stars" -Charles A. Beard |
Posted By: Praveen
Date Posted: 28 July 2007 at 4:33pm
|
I reinstalled. There is a problem with Microsoft Jet Database. Please help me to repair it. Iam using Windows XP Service Pack 2 -------------
|
Posted By: iSec
Date Posted: 29 July 2007 at 12:57am
|
Try openning it with MS Access and then
go to Tools -> Database Utilities -> Compact and Repair Database:
 ------------- "When it gets dark enough, you can see the stars" -Charles A. Beard |
Posted By: Praveen
Date Posted: 29 July 2007 at 8:53am
|
No Its a problem with the Jet driver. I want to install it again. Is it possible? Coz Iam using Microsoft Windows XP Pro SP2. Iam using MSOffice 2007 -------------
|
Posted By: iSec
Date Posted: 29 July 2007 at 9:44am
|
http://www.microsoft.com/downloads/details.aspx?familyid=2deddec4-350e-4cd0-a12a-d7f70a153156&displaylang=en - http://www.microsoft.com/downloads/details.aspx?familyid=2deddec4-350e-4cd0-a12a-d7f70a153156&displaylang=en ------------- "When it gets dark enough, you can see the stars" -Charles A. Beard |
Posted By: Praveen
Date Posted: 29 July 2007 at 9:47am
|
Now I have reinstalled my Office 2007. Even then the problem is there.
After you said, I downloaded this file. windowsxp-kb829558-x86-enu.exe Then I tried to install but it says:
What am I to do?? -------------
|
Posted By: iSec
Date Posted: 29 July 2007 at 10:17am
|
Try repairng the db in access like i suggested. ------------- "When it gets dark enough, you can see the stars" -Charles A. Beard |
Posted By: Praveen
Date Posted: 29 July 2007 at 10:34am
|
It is not the problem with the forum or the forum's database. It is a problem with all the databases. Even if I try to connect a new database it shows the same error. So the connecting driver is corrupted. Please give me a better idea instead. Thanking you. -------------
|
Posted By: iSec
Date Posted: 29 July 2007 at 5:32pm
|
You need to do it for at least one of your databases to see the results. You should not assume that it will not work just because you have many databases with the same problem. ------------- "When it gets dark enough, you can see the stars" -Charles A. Beard |
Posted By: Praveen
Date Posted: 29 July 2007 at 5:53pm
|
No Iam using MSO2k7 and I dont think diagonise office wont work in this case... I have done it... -------------
|
Posted By: iSec
Date Posted: 29 July 2007 at 5:56pm
|
If repairing the db doesn't work then there is nothing i could think of at this time...... ------------- "When it gets dark enough, you can see the stars" -Charles A. Beard |
Posted By: iSec
Date Posted: 29 July 2007 at 5:57pm
|
Actually let me rephrase that, if you think the problem is on the machine and not on the db itself then back up your databases and run them on a different machine and see if it works. ------------- "When it gets dark enough, you can see the stars" -Charles A. Beard |
Posted By: Praveen
Date Posted: 29 July 2007 at 6:22pm
|
ya it works on my friend's computer.... -------------
|
Posted By: iSec
Date Posted: 29 July 2007 at 7:26pm
|
well then backup your databases and format the troubled HDD and reinstall Windows on it! ------------- "When it gets dark enough, you can see the stars" -Charles A. Beard |
Posted By: Praveen
Date Posted: 29 July 2007 at 7:50pm
|
Hey what joking huh?? Now my 160GB HDD is full. OK Iam not in a position to format my HDD. Gimme a good idea yaar. Without my IIS Iam dying... -------------
|
Posted By: MortiOli
Date Posted: 29 July 2007 at 11:46pm
|
Praveen, have you Googled the problem? Try reinstalling the Jet engine - ie, http://www.zuggsoft.com/data/#Windows XP Installation |
Posted By: Praveen
Date Posted: 30 July 2007 at 4:36am
|
As you said I want to re-install the Microsoft Jet Database driver. So how to do coz Iam using the latest version 4.0.86..... something for Windows XP SP 2 and I am not able to install the updates. Please help me. -------------
|
Posted By: MortiOli
Date Posted: 30 July 2007 at 1:20pm
|
Do a search on Google for reinstalling the driver - I'm sure there's something around which states how to do it.
From the page I posted above, it looks as though the driver comes with Access, so have you tried reinstalling / repairing that?
Have you searched Google for the virus' name? I'm sure someone else has had the virus, had the same problem, and found a fix.
|
Posted By: Praveen
Date Posted: 30 July 2007 at 5:57pm
|
Everyone will be trying atmost to a level and then leave the case off by formatting the HDD and not by finiding a solution. So what else can the users with the position who cannot format the disk do??? -------------
|
Posted By: WebWiz-Bruce
Date Posted: 30 July 2007 at 6:30pm
|
By a new harddrive, install windows on that and use your old hardrive as a second drive incase you need to get anything off of it.
------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: MortiOli
Date Posted: 30 July 2007 at 8:48pm
Have you actually searched Google? From the above, it sounds like you're just assuming that the answer will be 'format your HDD'. |
Posted By: Praveen
Date Posted: 31 July 2007 at 12:40pm
|
Hey no. But I searched google. No response. Hello anyone's alive here?? I didnt get any response. -------------
|
Posted By: Praveen
Date Posted: 17 December 2007 at 5:56pm
|
Hey I got the problem solved. In the control userpasswords2 then user permissions for IWAM_ComputerName and IUSR_ComputerName were in the restricted group. So when I changed them to the Admin group, they started working.
Please say this to everyone. -------------
|
Posted By: michael
Date Posted: 17 December 2007 at 6:35pm
|
Dude. That is dangerous. Every visitor would have full admin rights on your system if there is a hole somewhere.
Did you ever try to just re-install MDAC?
In the C:\Windows\Inf folder, right-click the Mdac.inf file, and then click ------------- http://baumannphoto.com" rel="nofollow - Blog | http://mpgtracker.com" rel="nofollow - MPG Tracker |
Posted By: WebWiz-Bruce
Date Posted: 17 December 2007 at 6:46pm
|
The IUSR account in Admin group, someone is looking for trouble. The IUST group should be in the USER group. Just to add to what michael has suggested you should also make sure that the Windows/temp folder has read, write, and modify, permissions for the USER group. It is slightly insecure but for Access to work it is required, but it's allot more safe than placing the IUSR account into the Admin group. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: Praveen
Date Posted: 18 December 2007 at 12:01pm
|
You both are absolutely right. But since this being a local IIS system, I said that this is a solution instead of buying a new HDD or formatting the device. So what do you say?? -------------
|
Posted By: michael
Date Posted: 18 December 2007 at 5:39pm
|
Even though it is local you are obviously suspectable to attacks, otherwise you would not have gotten the virus in the first place.
re-insalling mdac like I suggested above is free and "might" take care of it. Often also, re-applying the SP2 might do it. ------------- http://baumannphoto.com" rel="nofollow - Blog | http://mpgtracker.com" rel="nofollow - MPG Tracker |
Posted By: Praveen
Date Posted: 18 December 2007 at 5:48pm
|
hey u!! the virus was caused by clicking on an unknown link from Yahoo! Messenger. -------------
|
Posted By: michael
Date Posted: 18 December 2007 at 8:43pm
|
Wasn't attacking you personally. It does not really matter how you got the Virus. Fact is, that every single person using a computer is in danger of getting hacked/virus etc. That is why it is a good idea to secure your computer whereever you can. ------------- http://baumannphoto.com" rel="nofollow - Blog | http://mpgtracker.com" rel="nofollow - MPG Tracker |