Solved windows server 2008 r2 constantly uploading data

April 6, 2013 at 01:44:50
Specs: window server 2008 R2
I have windows server 2008 R2 and have noticed that it is constantly uploading. I have had the system checked by our IT people but at this stage they are unable to identify the problem. they ran a malware and antivirus software and found some viruses which it removed but the uploading still goes on.

See More: windows server 2008 r2 constantly uploading data

Report •


✔ Best Answer
April 13, 2013 at 18:00:31
Download and install wireshark

http://www.wireshark.org/download.html

This is how to use it

http://www.howtogeek.com/104278/how...

This is for advanced detection.

http://cbl.abuseat.org/advanced.html

The idea is to find out what your computer is doing, and what information is leaving your computer and where it is going.



#1
April 6, 2013 at 13:32:51

Report •

#2
April 9, 2013 at 08:29:50
Aagainst the rules to multipost the same thread FYI. I have deleted your other one.

Fact you had no antivirus on the server indicates a minimally configured server which makes it ripe pickings for hackers. Most likely the "upload" is being done by hackers.

This server should be removed from the internet and isolated then rebuilt from scratch. Anything less won't remove the hackers back doors into your system.

You might want to review one of the many available guides for hardening your server.

It's servers like yours that allow botnets to exist on the internet. Get serious about your servers configuration.

Answers are only as good as the information you provide.
How to properly post a question:
Sorry no tech support via PM's


Report •

#3
April 13, 2013 at 15:43:27
Hi again


thanks wanderer i dont think that i will be doing that at this stage to costly looks like i will have to put up with it.
Surley there must be a program that will tell me where and when this upload is going to or just that it is uploading to somewhere.
The antivirus program expired and the person in charge didnt know.


Report •

Related Solutions

#4
April 13, 2013 at 15:45:04
Hi Gretti

went to the web site you suggested but i couldnt find anything that would help


Report •

#5
April 13, 2013 at 18:00:31
✔ Best Answer
Download and install wireshark

http://www.wireshark.org/download.html

This is how to use it

http://www.howtogeek.com/104278/how...

This is for advanced detection.

http://cbl.abuseat.org/advanced.html

The idea is to find out what your computer is doing, and what information is leaving your computer and where it is going.


Report •

#6
April 15, 2013 at 12:37:26
Hopefully this server doesn't contain;

banking/credit card info
financial info
patient info
customer info
business info

We almost lost $120,000 due to the AP person doing personal scrapbooking on the internet with her workstation. Fortunately the bank caught the issue before the money went overseas.

Hopefully you understand how serious this can be....

Answers are only as good as the information you provide.
How to properly post a question:
Sorry no tech support via PM's


Report •

Ask Question