Re: Security and Viruses
From: Alun Jones [MSFT] (alunj_at_online.microsoft.com)
Date: 08/18/04
- Previous message: kiki: "SSL"
- In reply to: Lee: "Security and Viruses"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 18 Aug 2004 14:32:35 -0700
"Lee" <Lee@discussions.microsoft.com> wrote in message
news:27FC045B-2F07-4812-B50F-64F64A2A21CF@microsoft.com...
> I keep getting the ServU-Damon virus that installs all kinds of
directories
> and files on my computer and setting the security on them so that I cannot
> delete them. How can I get IIS secure engouh that this will quit
happening.
ServU is the name of a third party FTP server. It's not a virus on its own,
but some viruses and hackers have chosen to include it so that their owners
can get access to your machine and treat it like some kind of cheap Internet
file storage, or for swapping their various files with their maleficent
chums. You might want to check that your virus scanner has reported and
cleaned all the viruses on your system, and that you are completely patched
(and firewalled).
Why are you of the opinion that this infection has crept in through IIS?
There are three steps you need to go through:
1. Unplug your system from the network.
2. Download a fresh virus scanner, or fresh updates for your existing virus
scanner. [Do this from another, presumed clean, computer, and put the
result onto a read-only medium such as a CD-R]
3. Scan your system. Clean up any viruses you find. Repeat until no
further viruses are found.
Once you're virus-free, read up on each of the viruses that were found, to
discover how you might have caught them. Apply all patches, paying
particular attention to those that protect you against the holes that you
were infected through. A simple virus scan and clean alone will not prevent
further infection; if you do not patch your system, the same holes will let
the same virus(es) back in to your system.
For more advice on protecting your system against viruses, visit
http://www.microsoft.com/protect and the newsgroup
microsoft.public.security.virus.
Alun.
~~~~
- Previous message: kiki: "SSL"
- In reply to: Lee: "Security and Viruses"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|