Download the Dumaru removal tool and run it on the server - just to be safe.
http://securityresponse.symantec.com/avcenter/venc/data/w32.dumaru.removal.t ool.html Travis -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Plato, Art Sent: Friday, June 18, 2004 6:34 AM To: [EMAIL PROTECTED] Subject: [IMail Forum] Possible Dumaru attack Folks, I am being blacklisted for possibly having the worm Dumaru on my server. I have read Symantec's synopsis on Dumaru and don't find any of the files or processes they list associated with Dumaru. Is there anything else I should be looking for? dnsbl says port 10000 is open. I have just blocked 10000 to and from my email server. Can you folks think of anything else I should be looking at or for? TIA, Art. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
