Les Bessant mailto:[EMAIL PROTECTED]
IT Manager,
Sanderson Townend & Gilbert
Acting in a personal capacity
http://www.tiggercam.co.uk
- New, improved and with more bounce!
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm-----Original Message-----
From: Jerry Gamblin [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 3:36 PM
To: NT System Admin Issues
Subject: IIS Slow Down Due to Nimda?Any one seen there IIS Server slow down due to the bug?
Is there anyway to stop the request(cmd.exe) from even being made to you box?Here's is what my logs look like. Sunday was a little slow but on an average day we get around ~700 unique visitors.
Date Hits Successful Hits
09/16/2001 : 372 : 222
09/17/2001 : 3,454 : 1,026
09/18/2001 : 6,224 : 1,046
09/19/2001 : 5,401 : 745
09/20/2001 : 2,193 : 86Total Hits : 17644
Average Hits : 3528That's around 14,000 hits alone from this virus.
I don't know what its doing to the server, but is there any way to make it stop?
Jerry Gamblin
Technology SpecialistLinn State Technical College
One Technology Drive
Linn, MO 65051
[EMAIL PROTECTED]
www.linnstate.edu
573-897-5240
-----Original Message-----
From: Murray Freeman [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 9:24 AM
To: NT System Admin Issues
Subject: RE: HELP VIRUS ON NT MACHINE?
HEY, not true, not true. We got hit on 3 servers and were able to cleanse
manually and never even turned off the servers, nor did it impact our
regular production.Murray
-----Original Message-----
From: Rocky Stefano [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 9:21 AM
To: NT System Admin Issues
Subject: RE: HELP VIRUS ON NT MACHINE?
For those of you that were unfortunately hit with the latest worm. There is
usually no recourse but to wipe the machine clean and reload your software.
Trend Antivirus has released a cleaner for the virus. Here is the info.Trend Micro has developed a cleaning tool that will allow you to clean
systems infected by PE_NIMDA.A. The cleaning tool and instructions, manual
cleaning instructions, and the latest pattern file can be found on our FTP
site at:ftp://us-web\[EMAIL PROTECTED]
Password: tmcustomer
Directory: Premium Customer\tool
Files:
Cleaning tool: FIX_NIMDA.zip
Cleaning tool description and instructions: Readme_nimda.txt
Manual cleaning documentation: How to Clean.txt
Latest pattern file: ptn_942.zip
-----Original Message-----
From: Tiffany Belcher [mailto:[EMAIL PROTECTED]]
Sent: September 19, 2001 5:35 PM
To: NT System Admin Issues
Subject: HELP VIRUS ON NT MACHINE?
This thing is on a machine at work and it writes .eml files all over the
place in the folders on the hard drive. Is there a way to get rid if this
virus? What is it? Uninstalling outlook express or email would that do it?
It ran very sluggish and now is frozen up. HELPhttp://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
_____________________________________________________________________
This message has been checked for all known viruses by Star Internet
delivered through the MessageLabs Virus Scanning Service. For further
information visit http://www.star.net.uk/stats.asp or alternatively call
Star Internet for details on the Virus Scanning Service.
The information in this communication and any attachments is confidential and may be legally privileged. It is intended solely for the addressee. If you are not the intended recipient any use, review, dissemination, distribution or copying of this information is strictly prohibited. If you have received this communication in error please notify us immediately on 0191 261 2681 and delete the original message and any copies of it.
Any opinions, conclusions or other information in this message that do not relate to the official business of Sanderson Townend & Gilbert are neither given nor endorsed by the firm.
_____________________________________________________________________
This message has been checked for all known viruses by Star Internet
delivered through the MessageLabs Virus Scanning Service. For further
information visit http://www.star.net.uk/stats.asp or alternatively call
Star Internet for details on the Virus Scanning Service.
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
