[Date Prev][Date
Next][Thread Prev][Thread Next][Date
Index][Thread Index]
Re: IIS worm infection
- To: <ukha_d@xxxxxxx>
- Subject: Re: IIS worm infection
- From: "Shmern" <shmern@xxxxxxx>
- Date: Wed, 19 Sep 2001 08:51:50 +0100
- Delivered-to: mailing list ukha_d@xxxxxxx
- Mailing-list: list ukha_d@xxxxxxx; contact
ukha_d-owner@xxxxxxx
- References:
<000c01c14086$e89b4610$2701a8c0@ec2a1nl9103840>
- Reply-to: ukha_d@xxxxxxx
http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=PE_NIMDA.A
This explains the virus and where to go for patches etc..., unfortunately
your 4500 files would probably have to be fixed separately. If the line of
code added is the same across all files then it would be simple to download
a multi-file find and replace tool. Can't remember the one we use in work
ATM, but if you need one I'll find out in about 20 mins when I get in.
Darren
----- Original Message -----
From: "Graham Howe" <graham@xxxxxxx>
To: "UKHA List (E-mail)" <ukha_d@xxxxxxx>
Sent: Tuesday, September 18, 2001 10:14 PM
Subject: [ukha_d] IIS worm infection
> OK, it is bad, over 4500 files on my server have been modified today.
This
> could well mean me having to completely rebuild my server. Does anyone
have
> any information about how to clean up the infection.
>
> Graham
>
>
>
> For more information: http://www.automatedhome.co.uk
> Post message: ukha_d@xxxxxxx
> Subscribe: ukha_d-subscribe@xxxxxxx
> Unsubscribe: ukha_d-unsubscribe@xxxxxxx
> List owner: ukha_d-owner@xxxxxxx
>
> Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
For more information: http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx
Subscribe: ukha_d-subscribe@xxxxxxx
Unsubscribe: ukha_d-unsubscribe@xxxxxxx
List owner: ukha_d-owner@xxxxxxx
Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
Home |
Main Index |
Thread Index
|