Recently has been busy system migration, busy, there is no time to maintain the company's mail server. There are more than 1000 people in the mailbox.
Today 11 o'clock in the morning, helpdesk phone me, said exchange above the spam program is not open. I thought it was strange. How could that be? I had a lot of things in hand, let him restart the service to try, restarted, said not yet. A bit of attention. Remote Desktop Board Server A look, then dumbfounded, 2,270 zombie process running. Are all "Tbviewer.exe,utilman.exe". Obviously in the Trojan. Use Taskkill can't bulk delete, download a 360 First aid box, hurriedly Avira Trojan. The result comes out, my God, unexpectedly has 7 Trojan horse. Granny's, hurry up and handle restarting the server. Log on to the server to see that it is back to normal.
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/6F/66/wKioL1WbcYmzuwUKAAMsDNk2qk8074.jpg "title=" capture. PNG "alt=" Wkiol1wbcymzuwukaamsdnk2qk8074.jpg "/>
Exchange 2010 Server in Trojan, zombie process 2,270