General discussion

  • Creator
    Topic
  • #2131213

    Virus/Win2kServer

    Locked

    by scottmci ·

    Nimda infected 1700 TFTP files. Norton shows all clear but we are reinfected. Could it be through the website?

All Comments

  • Author
    Replies
    • #3567539

      Virus/Win2kServer

      by steven s. warren ·

      In reply to Virus/Win2kServer

      I have had this before. It happened right after I configured my FTP site. Luckily my virus utility caught it. YOu can manually delete the file from the Scripts directory in IIS and run your virus scans after.

      After that, lock down your FTP Site and run the hfnetchk utility that you can download from technet. It will tell you all of the hotfixes your are missing. I would also download the iis lockdown tool and urlscan to further lock down your FTP and IIS Site.

    • #3568252

      Virus/Win2kServer

      by scottmci ·

      In reply to Virus/Win2kServer

      This question was closed by the author

Viewing 1 reply thread