Re: Nimda Virus
From: x y (jamescagney90210@excite.com)
Date: 05/14/02
- Next message: x y: "Re: System Log tools"
- Previous message: mark M: "128 bit High cipher strength"
- In reply to: bhavana: "Nimda Virus"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "x y" <jamescagney90210@excite.com> Date: Mon, 13 May 2002 22:15:41 -0400
It sounds like most of those files should have been deleted. Is there
anything that is not working on your computer?
It is recommended that you format and reinstall, but you can choose to do
whatever you want, depending on how secure you want to be. The problem is
that there is no way to know for sure whether someone took advantage of the
vulnerabilities on your computer to install some sort of back door that
would remain even after you patch your system. You really need to install
all the microsoft security patches for your system and continue to do so as
patches come out. Follow the recommendations at www.microsoft.com/security
including signing up for the microsoft security patch newsletter,
iislockdown including urlscan, downloading antivirus updates automatically
every day, www.gfi.com languard file integrity checker,
www.mynetwatchman.com free software, a software and hardware firewall such
as sygate and netgear, etc. etc. Other posts here have additional
suggestions.
"bhavana" <bhavana_21@yahoo.com> wrote in message
news:2d2b01c1fab7$bb389010$b1e62ecf@tkmsftngxa04...
> hi
>
> This is regarding Nimda virus. My system was infected
> with this virus and cleaned it up using Fsecure software.
> Now, many of the files are deleted from my system.The ones
> that are infected are either removed, repaired by this
> software. The files that were deleted are all from
> inetpub directory. I am not sure whether these files come
> with the installation of IIS or they were posted into my
> system by this virus. So could anyone tell me if have to
> re-install IIS.
> For your info I am giving you the some of the files that
> were deleted:
> C:\inetpub\scripts\tftp10944
> C:\inetpub\scripts\tftp10924
> C:\inetpub\scripts\tftp10884
> C:\inetpub\scripts\tftp10872
> C:\inetpub\scripts\tftp10868
> and so on.... all starting with tftp..
> Also, some of the files are repaired in the Visual Studio
> package. Do I need to install the studio as well..
> What is the best way to get rid of such
> malacious programs. After scanning and removing the virus
> the Fsecure software cautions me to reinstall the
> operating system to ensure the system is safe in
> future(just incase someone got access to my system) .
> Do I really need to do so.
>
> Thanks in advance.
- Next message: x y: "Re: System Log tools"
- Previous message: mark M: "128 bit High cipher strength"
- In reply to: bhavana: "Nimda Virus"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
