i need help! we have a windows 2003 SBS, running ISA server. everyday, i mean everyday, i notice a download of about 80MB from hxxp://windowsupdatev8.3322.org/. it is really crazy, we have tried everything, blocking in at the domain level, IP ... no way, absolutely, it keeps running and i am not sure how to remove it as there is absolutely no information about this domain name in the net.
Any idea on the steps i can perform to detect and remove this? it is costing us a lot of $$ extra bandwidth every month, and who knows, the server might be vulnerable to any kind of attacks now...
please advise before it starts getting worse.
thanks very much.