You MUST take the down time. UNPLUG the server from the network and clean
it ! (with the appropriate virus scanning software) Then install MS01-044 on
it.
Lesson learned don't put all your eggs in one basket !
-----Original Message-----
From: Roger Ali [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 24, 2001 7:17 AM
To: NT System Admin Issues
Subject: RE: Nimda Breakout Help!
That's the problem, the machine that is infected is our file server, web
outlook server, and our email server. I can't shut these things down as
they are core to the business. The virus came through email to internal
users, not through IIS. We've patched up IIS regardless and I've blocked
all attachments, I dunno how long it will last with our business. But we'll
see. Any other ideas?
Thanks
Roger Ali
-----Original Message-----
From: Kelly Borndale [mailto:[EMAIL PROTECTED]]
Sent: Saturday, September 22, 2001 7:57 PM
To: NT System Admin Issues
Subject: RE: Nimda Breakout Help!
Unplug the infected machine from the network.
-K
> -----Original Message-----
> From: Roger Ali [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, September 22, 2001 2:06 PM
> To: NT System Admin Issues
> Subject: Nimda Breakout Help!
>
>
> Guys,
> Does anyone know a way to prevent the PE_Nimda and all other
> variations from infecting servers. I've got a mixed network 2K and NT
> and all my servers were hit, I have trend office scan and trend server
> protect and all it does is notifies me about the virus and that it
> couldn't clean or move the files. I've gotten the cumulative patch
> from trend's site and applied it to all my servers but they keep
> getting infected. Is there a way
> to stop this at all?? Please help.
>
> Thanks
> Roger Ali
>
> http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
>
>
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
