Secuirty Windows NT 4.0 and IIS 4

I have a Windows NT 4 server with service pack 5 running IIS 4 and Exchange 5.5 with service pack 3 for exchange. I was recently hit with the SunOS/Box virus. What can I do to tighten up security on my server.