DNSHost.exe trojan found, now after fix, no one can print
- by Matt Dawdy
What started today as an inability to get to the internet (but people could get in just fine), morphed to we realized that the DNS Server wasn't working, then we figured out that we had a trojan called DNSHost.exe (spybot.rl I think), and we disabled its service entry and deleted the offending file and all registry keys told to use by the Trend Micro site.
Now, we can get on the internet, but the printer being served by this machine (called server2) cannot be printed to from any client machine on the network.
We get the error "The RPC Server is unavailable".
I'm assuming that this is related to the DNS issue we had earlier, as we were able to print just fine until this fun happiness started this morning.
Anyone have any solid suggestions? Windows Server 2003 R2 SP2, and the client machine are all Windows XP SP2.