RE: IIS Slow Down Due to Nimda?

[Martin Blackstone]

Title: Message

Slow down? Not that we could tell.

But my traffic doubled the first day it was out.

 

However it did tell that what I built can scale!

-----Original Message-----
From: John Cesta - Lists [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 8:03 AM
To: NT System Admin Issues
Subject: RE: IIS Slow Down Due to Nimda?

Any one seen there IIS Server slow down due to the bug?
Is there anyway to stop the request(cmd.exe) from even being made to you box?

Here's is what my logs look like. Sunday was a little slow but on an average day we get around ~700 unique visitors.

 

Of course IIS is going to slow down due to many requests. Not much of a way to make it stop unless you know where the source is, call them and ask. Otherwise we are all in the same boat.

 

John Cesta

-----Original Message-----
From: Jerry Gamblin [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 10:36 AM
To: NT System Admin Issues
Subject: IIS Slow Down Due to Nimda?

Any one seen there IIS Server slow down due to the bug?
Is there anyway to stop the request(cmd.exe) from even being made to you box?

Here's is what my logs look like. Sunday was a little slow but on an average day we get around ~700 unique visitors.

Date         Hits    Successful Hits
09/16/2001 : 372   : 222
09/17/2001 : 3,454 : 1,026 
09/18/2001 : 6,224 : 1,046 
09/19/2001 : 5,401 : 745
09/20/2001 : 2,193 : 86 

Total Hits : 17644
Average Hits : 3528

That's around 14,000 hits alone from this virus.
I don't know what its doing to the server, but is there any way to make it stop?

Jerry Gamblin
Technology Specialist

Linn State Technical College
One Technology Drive
Linn, MO  65051
[EMAIL PROTECTED]
www.linnstate.edu
573-897-5240

-----Original Message-----
From: Murray Freeman [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 9:24 AM
To: NT System Admin Issues
Subject: RE: HELP VIRUS ON NT MACHINE?

HEY, not true, not true. We got hit on 3 servers and were able to cleanse
manually and never even turned off the servers, nor did it impact our
regular production.

Murray

-----Original Message-----
From: Rocky Stefano [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 9:21 AM
To: NT System Admin Issues
Subject: RE: HELP VIRUS ON NT MACHINE?

For those of you that were unfortunately hit with the latest worm. There is
usually no recourse but to wipe the machine clean and reload your software.
Trend Antivirus has released a cleaner for the virus. Here is the info.

Trend Micro has developed a cleaning tool that will allow you to clean
systems infected by PE_NIMDA.A. The cleaning tool and instructions, manual
cleaning instructions, and the latest pattern file can be found on our FTP
site at:

ftp://us-web\[EMAIL PROTECTED]

Password: tmcustomer

Directory: Premium Customer\tool

Files:

Cleaning tool: FIX_NIMDA.zip

Cleaning tool description and instructions: Readme_nimda.txt

Manual cleaning documentation: How to Clean.txt

Latest pattern file: ptn_942.zip

-----Original Message-----
From: Tiffany Belcher [mailto:[EMAIL PROTECTED]]
Sent: September 19, 2001 5:35 PM
To: NT System Admin Issues
Subject: HELP VIRUS ON NT MACHINE?

This thing is on a machine at work and it writes .eml files all over the
place in the folders on the hard drive. Is there a way to get rid if this
virus? What is it? Uninstalling outlook express or email would that do it?
It ran very sluggish and now is frozen up. HELP

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm