DNSHost.exe trojan found, now after fix, no one can print

Posted by Matt Dawdy on Server Fault See other posts from Server Fault or by Matt Dawdy
Published on 2010-03-05T23:07:59Z Indexed on 2010/03/24 15:03 UTC
Read the original article Hit count: 337

Filed under:

trojan

|

rpc

|

network-printer

What started today as an inability to get to the internet (but people could get in just fine), morphed to we realized that the DNS Server wasn't working, then we figured out that we had a trojan called DNSHost.exe (spybot.rl I think), and we disabled its service entry and deleted the offending file and all registry keys told to use by the Trend Micro site.

Now, we can get on the internet, but the printer being served by this machine (called server2) cannot be printed to from any client machine on the network.

We get the error "The RPC Server is unavailable".

I'm assuming that this is related to the DNS issue we had earlier, as we were able to print just fine until this fun happiness started this morning.

Anyone have any solid suggestions? Windows Server 2003 R2 SP2, and the client machine are all Windows XP SP2.

© Server Fault or respective owner

Related posts about trojan

2/2: Trojan.Sasfis Trojan Horse--And Other Malware You Should Know About

as seen on Internet.com - Search for 'Internet.com'
A round-up of today's worms, Trojans, viruses, and other malware threats. >>> More
Does VMware_ThinApp_4.0.3_169725.msi contain Trojan.Win32.Vapsup in it? [closed]

as seen on Super User - Search for 'Super User'
Today I ran a full system scan using Online Armor++. It detected Trojans in the installer. I have had this installer on the computer for many months and I do not remember if I ever installed it on this PC or not. For some reason I unpacked the installer with 7zip though. I was probably going to attempt… >>> More
Cleaning a proxy/phishing trojan from Windows XP computer

as seen on Super User - Search for 'Super User'
I am trying to remove an interesting trojan from a Windows XP computer. It manifests itself as a phishing page (screenshot linked) that appears after the user tries to log on to eBay. So far, I haven't found any other web sites that are affected. As you can see, the trojan intercepts browser connections… >>> More
Can Windows Essentials Remove the alescruf.c Virus from a Windows PC?

as seen on Super User - Search for 'Super User'
A colleague just visited a site which had been hacked by the alescruf.c trojan virus, which infects HTML via embedded JavaScript. Windows PC's are infected by visiting the site. If my colleague has Windows Essentials, which detected and removed the trojan, is there anything else that he needs to… >>> More
2/10/10: Backdoor.Mulkerv Trojan Horse--And More of Today's Threats

as seen on Internet.com - Search for 'Internet.com'
A summary of the day's newest viruses, Trojans, worm, and other malware threats. >>> More

Related posts about rpc

JSON-RPC and Json-rpc service discovery specifications

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello, I'm going to implement JSON-PRC web service. I need specifications for this. So far I had found only one resource that can be called as real specifications: JSON-RPC 1.0 http://json-rpc.org/wiki/specification Proposal of JSON-PRC 2.0: http://groups.google.com/group/json-rpc/web/json-rpc-2-0… >>> More
Slow XML-RPC in Windows 7 with XML-RPC.NET

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm considering to use XML-RPC.NET to communicate with a Linux XML-RPC server written in Python. I have tried a sample application (MathApp) from Cook Computing's XML-RPC.NET but it took 30 seconds for the app to add two numbers within the same LAN with server. I have also tried to run a simple… >>> More
Windows RPC vs XML-RPC

as seen on Stack Overflow - Search for 'Stack Overflow'
Is there any benchmark about encoding/decoding certain common typed data in Microsoft RPC NDR engine (DCE 1.1) in comparison with that in XML-RPC-C/C++ in the de-facto C/C++ implementation in XML-RPC? Actually I have to choose between Windows RPC and XML-RPC-C/C++ to implement my own common object… >>> More
Cross-site json rpc : Python server side and Mozilla extension using Javascript client side

as seen on Stack Overflow - Search for 'Stack Overflow'
hello, I am building a mozilla extension that contacts a python application on a remote server to send and receive data. The python application can be used using xml-rpc from a python console.I am given the task to design a json-rpc that would contact the same application.Making the python server… >>> More
GWT - occasional com.google.gwt.user.client.rpc.SerializationException

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello we are haunted by occasional occurences of exceptions such as: com.google.gwt.user.client.rpc.SerializationException: Type 'xxx' was not assignable to 'com.google.gwt.user.client.rpc.IsSerializable' and did not have a custom field serializer.For security purposes, this type will not be… >>> More