Author Message

1. How can I be certain if these servers are infected?
2. How can I clean them if they are?


Mon, 26 Jul 2004 02:38:53 GMT  

>-----Original Message-----
>I have servers that show some signs of infection with the

was patched and web logs show unsuccessful attempts by
infected PCs to infect the servers. I have found files
called sample.eml and desktop.eml in various directories
and their content matches the description of the worm.

>1. How can I be certain if these servers are infected?
>2. How can I clean them if they are?


Your first step is to get an AV program running on all of
your systems.  From the desktop to servers.  If this is
happening and you still feel you may have a virus then you
need to get a different product that provides automatic

My suggestion is to try Kaspersky (www.kaspersky.com) or F-
Secure (www.f-secure.com).  Both should provide you with
trial versions that will address your immediate concern of
determining if they are infected and cleaning them.

Mon, 26 Jul 2004 13:39:07 GMT  
 [ 2 post ] 

 Relevant Pages 

1. W32.Nimda.A@mm and W32.Nimda.enc

2. Win32 Nimda.A@mm (dr) and Win32 Nimda.E@mm (dr)

3. w32.nimda.a@mm problems

4. Been hit by W32.Nimda.A@mm

5. W32.Nimda.enc

6. W32.Nimda.enc

7. W32.Nimda.enc its killing me!

8. Recurring W32.Nimda.enc

9. Norton Virus Alert...(W32.Nimda.enc)

10. Virus W32.Sobig.C@mm from 3be15be7@news.softvelocity.com

11. VIRUS WARNING : W32/Sobig.E@mm

12. PSS Security Alert - W32/Palyh@MM


Powered by phpBB® Forum Software