We found a virus on our server that may have cause IIS corruption. I am not
able to restart the IIS service. I was able to remove IIS successfully but
keeps erroring out every time I try to reinstall. As it appear to finish all
I get is can not install IIS run setup again.

I don't remember the virus, some backdoor..something.

Is there a way to manually remove IIS then reinstall or something? Thank you.

Do you have anything in the eventlog.

find this log file http://technet.microsoft.com/en-us/library/bb742522.aspx
and post the contents here...

Regards,

Trevor Benedict
MCSd

"Patriot" <Patriot [at] discussions.microsoft.com> wrote in message
news:78D5F25B-C77E-4664-986F-E954D92466B0 [at] microsoft.com...
> We found a virus on our server that may have cause IIS corruption. I am
> not
> able to restart the IIS service. I was able to remove IIS successfully but
> keeps erroring out every time I try to reinstall. As it appear to finish
> all
> I get is can not install IIS run setup again.
>
> I don't remember the virus, some backdoor..something.
>
> Is there a way to manually remove IIS then reinstall or something? Thank
> you.

as you have seen, even a cleaned up machine (i assume you ran some standard
tool to remove the virus), may remain compromised or damaged... the
'correct' thing to do after an event like that is to flatten the box and
start from clean install media. that is the only real way to be sure the
machine is back the way it was.... oh, and while you are at it, and before
you put it back on the net, plug the hole that got it infected in the first
place!

"Trevor Benedict" <TrevorNews [at] yahoo.com> wrote in message
news:OrfZUU6MIHA.5400 [at] TK2MSFTNGP04.phx.gbl...
> Do you have anything in the eventlog.
>
> find this log file
> http://technet.microsoft.com/en-us/library/bb742522.aspx and post the
> contents here...
>
> Regards,
>
> Trevor Benedict
> MCSd
>
> "Patriot" <Patriot [at] discussions.microsoft.com> wrote in message
> news:78D5F25B-C77E-4664-986F-E954D92466B0 [at] microsoft.com...
>> We found a virus on our server that may have cause IIS corruption. I am
>> not
>> able to restart the IIS service. I was able to remove IIS successfully
>> but
>> keeps erroring out every time I try to reinstall. As it appear to finish
>> all
>> I get is can not install IIS run setup again.
>>
>> I don't remember the virus, some backdoor..something.
>>
>> Is there a way to manually remove IIS then reinstall or something? Thank
>> you.
>
>

I would second Dave's suggestion. One way to be absolutely sure.

Regards,

Trevor Benedict
MCSD

"Dave" <noone [at] nowhere.com> wrote in message
news:uAWiwe6MIHA.6108 [at] TK2MSFTNGP03.phx.gbl...
> as you have seen, even a cleaned up machine (i assume you ran some
> standard tool to remove the virus), may remain compromised or damaged...
> the 'correct' thing to do after an event like that is to flatten the box
> and start from clean install media. that is the only real way to be sure
> the machine is back the way it was.... oh, and while you are at it, and
> before you put it back on the net, plug the hole that got it infected in
> the first place!