|
This server is fully under my control and I can run anything (if it is supported within RDP)
Do you have a link to a rootkit scanner?
As for system32 files, the problem started last december when I got a few spamcop messages which pointed to a possible problem but this only lasted 2-3 days and went away and I did not think much about it. So my guess it that the worm was installed at that time and was dormant until a few days ago
|