Legitimate MSDN/VLSC copies exist, but many downloads online are cracked or malware-infested. The official SHA-1 hashes (e.g., en_win_srv_2003_r2_standard_cd1.iso ) are available but not hosted by Microsoft anymore.