can’t compose or receive mails
hello everyone,
i work in an organisation that works as ISPs .we also provide web hostig ,mail service etc.we have firewall installed.
my problem is that i can't check my mails and compose them.if someone mail me for the first time or sometimes for 2-3 days i can get that but after some days my mails are not received.the other person doesn't know about it.so he assumes that i am getting mails.
Also once when i tried to compose ,a message came to me that some 'Mailor Dameon is stoping it'.
recently i discovered that my system had 'Win32.blaster.worm '.I have Win2k installed also svchost.exe causes problem sometimes.can anyone tell me the reason and how to get out of that?
thanks in advance.
Software/Hardware used:
Software/Hardware used:
ASKED:
December 14, 2004 11:59 PM
UPDATED:
December 27, 2004 11:54 AM
Answer Wiki:
You are checking the mail through the browser or through any email clients like outlook..etc..Svc host.exe is because of blaster virus.For this you must install up todate security patches released by microsoft.If your windows is autoupdate the blaster patch will install automatically.Otherwise u can download at
http://support.microsoft.com/default.aspx?scid=kb;en-us;833330
For installing this patch in windows2000 you must have atleast servicepack2 installed.There is a tool released by microsoft for blaster virus.You can download third party virus tool from symantec
http://securityresponse.symantec.com/avcenter/tools.list.html
tool name isw32.blaster.worm,fixblast.exe.
But be sure that security patches are installed.Otherwise no use using the tool.
To see all answers submitted to the Answer Wiki: View Answer History.
The Blaster worm is not new and is removed by any good anti-virus software. This indicates that you need to verify that your AV software is up to date. It wouldn’t hurt to put Ad-Aware or SpyBot on your computer to remove other malware from your computer. These in addition to the Microsoft security updates should get rid of the causes of your problem. You may still have to re-install some regular programs such as your e-mail client because spyware, viruses, etc, often damage other software and cause problems that continue after removal.
When W32-Blaster Worm is removed and system patched. Can you verify that your mail relay is operating correctly. Try running some SMTP tests from inside Network-Out and from Outside-In.
Eg: From Command prompt:
C:telnet mail.your.mail.server 25
Try the http://www.dnsreport.com website and run Mail checks on your email address, mail server etc… while you are there it might be a good idea to run DNS check on your domain and identify any MX issues your domainspace might have….
Is your secondary MX host accepting mail when your primary seems to drop it?
All of this is probably overkill for your problem… but if nothing else, may identify unknown issues to rectify.
At some point the mail is being stopped by the hosting server because of the virus you have on your computer. I would suggest definitely installing a good anti-virus software on your computer and microsoft has a worm removal tool. The svchost is something that needs to run on your system, so do not try to do anything with it
I don’t know if your problem is resolved, but here are a few things to try. 1 Go to download.com and look for trojan guarder golden and scan your computer. 2 Go symanantec and and download the blaster fix tool:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
hi all,
i removed the worm by security patches suggested by you,but now i have another problem.
yesterday i was again facing problem in network conectivity.i don’t know whether it was due to my system or the network itself.but i run Norton antivirus scan.it could detect no virus so i closed it. then i did some other works on internet and shutdown. today when i started my system,Norton itself ran and give me message about finding w32 again.it says ‘clean:failed quarantine:succeded”what does it mean?
That means that Norton found a virus and could not clean it so it quarantined it, that is changed the name so the file is not executable and moved it to the quarantine directory you have configured. You may need to examine the general security on your network. Do all the computers have up to date anti-virus software, security patches and anti-spyware software? Is there firewall software on all computers? Is your network firewall active and properly configured? Does e-mail get scanned for viruses before users receive it? Viruses aren’t magic, just appearing on your computer. If you get viruses after cleaning off your computer, then they are coming from somewhere and that route to your computer needs to be fixed.