Re: SOS MAYDAY MAYDAY!

  • From: "Ryan Thomas" <ryan@xxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Sat, 5 Jul 2003 20:24:43 +0100

Thanks for everyone's help with this. Finally resolved it.

The root cause was a virus called w32.magistr.39921.mm it seems to be awakened 
by SP4 such that on the first boot after applying the pack it starts killing 
your HD on a sector level. I was lucky I didn't lose more data.

You can be sure the client will have wished he had bought an AV package when he 
gets my labour bill!

thanks again for the help.

Ryan
  ----- Original Message ----- 
  From: Ryan Thomas 
  To: [ExchangeList] 
  Sent: Saturday, July 05, 2003 5:23 PM
  Subject: [exchangelist] SOS MAYDAY MAYDAY!


  http://www.MSExchange.org/

  Need help guys

  Service packed a server 2000 box to SP4, no problem. Installed Symantec 
antivirus small business edition, client install.

  Now the machine boots up but I cannot do anything, the desktop appears and I 
can move mouse but not click anything, also get the error at logon 'system log 
is full'.

  Tried safe mode boots but have same problem.

  Please save my skin guys, any help is MUCH appreciated before I get fired on 
Monday.
  ------------------------------------------------------
  List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
  Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
  Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
  ------------------------------------------------------
  Other Internet Software Marketing Sites:
  Leading Network Software Directory: http://www.serverfiles.com
  No.1 ISA Server Resource Site: http://www.isaserver.org
  Windows Security Resource Site: http://www.windowsecurity.com/
  Network Security Library: http://www.secinf.net/
  Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
  ------------------------------------------------------
  You are currently subscribed to this MSExchange.org Discussion List as: 
info@xxxxxxxxxxxx
  To unsubscribe send a blank email to $subst('Email.Unsub') 

Other related posts: