Windows Forum

Ask something
Discussion Locked

Virus/Win2kServer

0 helpful
3 replies

by scottmci

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Nimda infected 1700 TFTP files. Norton shows all clear but we are reinfected. Could it be through the website?

3 replies

by Steven S. Warren

I have had this before. It happened right after I configured my FTP site. Luckily my virus utility caught it. YOu can manually delete the file from the Scripts directory in IIS and run your virus scans after.

After that, lock down your FTP Site and run the hfnetchk utility that you can download from technet. It will tell you all of the hotfixes your are missing. I would also download the iis lockdown tool and urlscan to further lock down your FTP and IIS Site.

This discussion is closed to new replies.