RE: Nimda - Thought we were protected

[Marc Miller]

> About every fifteen minutes or so, the .EML files are all back again. 

I've heard about this- in fact, just this afternoon.  In this case, I
recommended to my customer to "quarantine" the machine (read: remove the
network cable!) and run the NIMDA scanner/fix from the machine locally (you
won't have any other choice) and re-examine the machine when finished.  That
solved their problem, but it did take time to do.

Sorry if my fix seems too pedestrian....

-Marc Miller
Sr. Programmer/Analyst
Virtual Systems
207 Kirkland Ave.,
Kirkland, WA 98033
(425) 828-9495

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm