General discussion

Locked

Virus/Win2kServer

By scottmci ·
Nimda infected 1700 TFTP files. Norton shows all clear but we are reinfected. Could it be through the website?

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Virus/Win2kServer

by Steven S. Warren In reply to Virus/Win2kServer

I have had this before. It happened right after I configured my FTP site. Luckily my virus utility caught it. YOu can manually delete the file from the Scripts directory in IIS and run your virus scans after.

After that, lock down your FTP Site and run the hfnetchk utility that you can download from technet. It will tell you all of the hotfixes your are missing. I would also download the iis lockdown tool and urlscan to further lock down your FTP and IIS Site.

Collapse -

Virus/Win2kServer

by scottmci In reply to Virus/Win2kServer

Very quick response. Thanks.

Collapse -

Virus/Win2kServer

by scottmci In reply to Virus/Win2kServer

This question was closed by the author

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums