I use Norton. I did all the updates for the newest virus definitions.
According to SARC you should repair the EML, NMS files and it does not
repair it. It says it cannot repair them. It deletes the DLL files however
but that is about it.
I rebooted the server several times. I still have the problem.
I will try the tool you suggested and let you know what happens.
Thanks
-----Original Message-----
From: Clark, Steve [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 4:18 PM
To: NT System Admin Issues
Subject: RE: NIMDA virus Help please
Valencia,
What is your anti-virus program? Have you updated it to the latest? Have you
followed the guidelines set down by SARC or others to remove EML or NWS
files? If your server is infected, STOP all the services or you will not
eradicate it. Also, check out the removal tool from
http://www.centralcommand.com.
Email back if you have questions.
Steve Clark
Clark Systems Support, LLC
AVIEN Charter Member
www.clarksupport.com
301-610-9584 voice
240-465-0323 Efax
-----Original Message-----
From: Dawson, Valencia [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 4:13 PM
To: NT System Admin Issues
Subject: NIMDA virus Help please
I will attempt to post another SOS and hope this is delivered this time.
After several attempts to get rid of this virus I am still not able to see
the back of it.
I installed the patches, did various virus scans and still I keep getting
the files with the html,nws and enc files being infected. This is happening
on the exchange server.
The intranet server seems to be clear of viruses but whereas users can
access the internet, they cannot access the intranet. The WWW and FTP
services have stopped and I cannot restart them.
Help please if you get this message.
Thank you in advance.
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
