Home > Ask the Microsoft Exchange Experts > Richard Luckett: Spam and Security Questions & Answers > Do I have a Remote Administration Trojan (RAT) on my system?
Ask The Exchange Expert: Questions & Answers
EMAIL THIS

Do I have a Remote Administration Trojan (RAT) on my system?

Richard Luckett EXPERT RESPONSE FROM: Richard Luckett

Pose a Question
Other Exchange Categories
Meet all Exchange Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 01 July 2005
I have something called AdvancedRemoteInfo listed as a program file on my Exchange server. I'm afraid it is a RAT (Remote Administration Trojan) and I think I should delete it in Add/Remove programs. What do you think?

>
I suspect that you are correct. There is no such file having anything to do with the base Windows Server 2003 or Exchange Server 2003 installation. While I could not confirm the existence of "AdvancedRemoteInfo" as a Trojan executable, there are a number of variants for RATs. Because I can not confirm it, before removing it, you might want to make sure that it is not part of any third-party software you have installed on your system.

If it is a Trojan, using Add/Remove programs might not be enough. If you do not already have an antispyware solution for you enterprise servers, you should look into obtaining one. Most spyware solutions will allow you to perform a free scan of your system assuming it has Internet access. This will detect if this is in fact a Trojan.

However, in order to remove it, you will need to purchase the full version of the software or trust yourself to be able to remove it. Even if you successfully remove it manually, it might just re-install itself again. Antispyware software will hopefully be able to find all locations where the malware is hidden in your system and remove it.


Do you have comments on this Ask the Expert Q&A? Let us know.


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Richard Luckett: Spam and Security
How effective is tracking the IP address of an email hacker?
Why can't I grant users permissions to an Exchange public folder?
How can I configure Exchange IMF to allow an IP address or DNS?
Tool helps identify inbound Exchange Server email flow issues
Configure SMTP relay restrictions in Exchange Server 2003 to stop spam
How to lock down an SMTP relay to prevent spam in Exchange Server 2003
Connecting an Apple iPhone to Exchange Server on Windows SBS 2003
Why does a security alert pop up when accessing Outlook Web Access?
Exchange email sent to a domain using SPF authentication is returned
Selectively set email permissions for Exchange groups

Spam and virus protection
How to install Forefront Security for Exchange Server
Block Web beacons and protect OWA users from spam
Controlling spam in Exchange 2007 at the edge transport server level
How file-level antivirus software can harm your Exchange Server
Problems with email spoofing on SBS 2003
Exchange Insider e-zine
Securing your Exchange Server 2007 journaling archives
Troubleshooting Outlook Web Access issues on a 64-bit system
Microsoft Exchange Server security dos and don'ts
Troubleshooting Microsoft Exchange Server Event ID error 6009
Spam and virus protection Research

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
backscatter spam  (SearchExchange.com)
greylist  (SearchExchange.com)
image spam  (SearchExchange.com)
KnujOn  (SearchExchange.com)
Sender ID  (SearchExchange.com)
spam confidence level  (SearchExchange.com)
spamblock  (SearchExchange.com)
spim  (SearchExchange.com)
tarpitting  (SearchExchange.com)
Vouch by Reference (VBR)  (SearchExchange.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Outlook Web Access (OWA) Tips and Advice
HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersIT Downloads
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2004 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts