Windows 2000 Server infected virus!!!!

Most viruses come from within programs. Most likely, you got this virus from the internet, either through an executable program, or as an attachment with an email. Your firewall can't protect against viruses. YOu need an antivirus program as well, and make sure you update the virus signature files every week.

W32.Nimda.A@mm is a mass-mailing worm that utilizes multiple methods to spread itself. The name of the virus came from the reversed spelling of "admin". The worm sends itself out by email, searches for open network shares, attempts to copy itself tounpatched or already vulnerable Microsoft IIS web servers, and is a virus infecting both local files and files on remote network shares.

You got this because you did not patch your IIS server. It could easily have come from one on the computers on your network.

Nimda was a great virus, honestly. Very ingenious!
It can infect a remote Windows IIS server either by e-mail, by traveling over a network share, or by pushing itself through the IIS process.
It is still out there, replicating.
And yes, you can get Nimda over a cable connection.
Here is the Symantec write-up on Nimda:
http://www.sarc.com/avcenter/venc/data/w32.nimda.a@mm.html
(please remove any spaces)

Basically, you need to 1) clean your server of Nimda now and then 2) apply all necessary Windows patches on your server. SP3 will take care of all the patches you need.

Good luck.

This question was auto closed due to inactivity