Networks

Ask something
Discussion Locked

code red

0 helpful
3 replies

by johnricarte 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We are a small company of about 75 users most of whom are connected to an NT server, 2k server and an exchange server. This morning i got a very weird message on the event viewer about a virus that is being quarantined which doesn't seem to affect any of the services on the network but a problem had arised. Our capability to to connect to our email from home has been very inconsistent and a service in the IIS keeps on stopping. Are we infected? i have been reading a bit about the virus and Symantec has been very precise that this certain code red virus affects the IIS. If so does anyone know how to get rid of this virus? Thanks a lot!!!

3 replies

by jb007

Firstly you need an update to your virus software than can deal with the quarantined virus (clean it). Update your software.

Secondly go to microsoft security site and download the patch for code red after you've confirmed that you are infected.
patch is at:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/itsolutions/security/topics/codeptch.asp

NOTE: this work affects only

Affected Software:

Microsoft Index Server 2.0
Indexing Service in Windows 2000

Make sure you are not applying patches to machines that don't require it or have been misdiagnosed as being infected by code red.

All in all take a closer look at the event viewer and the quarantined item.

hope this helps,

jb

This discussion is closed to new replies.