Hi Guys, Thanks in advance to anyone willing to help... I have a serious issue in my office related with a trojan..We have two servers and around 15 pc's..The issue is When i try to ping using System Name(instead of using ip address) i am getting reply from an ip address (92.52.125.20) that is not in my domain.ie,I am not able to connect any server using system name. but i can able to connect servers using ip's(192.168.*.*). Our local System's iprange is 192.168.*.*. Is it is a trojan?....Need Help....please

If it is in an office it would seem the easiest route is to ask your IT guys to help. unless of course it is something you are not supposed to be doing, then i probably wouldnt do it.

hello brownboe, Thanks for your reply... We have two system admin and i am on of them... Please give a solution...I am not sure about it is a virus... i have searched in the net using that ip address(92.52.125.20} ..havnt get any useful solution...

I would scan the computers/servers and post the log files. Some scans I might ues: Avg 8.0 free (not for coporate use) malwarebyes antimalware superantispyware (have used this to remove zlob and vundo) adaware (lavasoft adaware) HijackThis. being in an office, i do not recall which of these are for private use only, but they tell you when installing or downloading. hope it helps

I have installed super antispyware, adware, and hijackhis softwares in my machine.. but still i am getting same issue.... i just search in the command prompt using Netstat command.. i saw 92.52.125.20 ip address has connected to my pc using port 80. this problem occured only when we are connected to internet other wise it wont occuring.. Any Idea about this....it could be very helpfull.

I'm not fully understanding you. Are you running a PING on your own system (i.e. what should be 127.0.0.1)? If so, then try to run a PING to any other website. If those are being routed over to the IP address which you are listing, then it's definitely a trojan. For trojans, what I normally recommend is running an Ad-Aware scan IN SAFE MODE. See if that does anything. PC LOAD LETTER.

Hello MrCrassic, We have one Active directory Server and one development server named adserver (192.168.1.1) and devserver (192.168.1.2) respectively. DNS and DHCP is also configured in the AD Server. All of our clients are getting ip address and DNS through DHCP. Problem is when try to ping anyone of this server or clients (ping adserver or ping client1) getting reply from 92.52.125.20 ip address, that is not in our network. This time i check the network status using netstat command, found that 92.52.125.20:80 ipaddress has established a connection through port number 80. This issue occur only the system have internet connection. But i can ping using ip address(ping 192.168.1.1) no problem. when i ping google.com got reply from google ip address, no problem. Our Net connection has shared using Linux Proxy.