W2K Advanced Server infected with W32/Netsky.p@MM

[Doctor Evil]

Howdy,

A client's W2K Advanced Server Box picked up the W32/Netsky.p@MM virus.
Please note they were not running AV software or a firewall (over my
objections) Long story short, I whacked the virus and made the requisite
reg entries, deleted the proliferation files it drops and installed AV and
Firewall Software (F-prot and ZoneAlarm respectively)

I've severed the head of the beast, but the body remains and the carcass
stinks. In other words there are several directories that were created by
the virus that I cannot delete, even when logged in as Administrator.

I get a dialog box that pops up and says something to the effect of "Unable
to delete directory, cannot access" or somthing similar.

What can I do to whack those directories that are still full of the virus
infected files, that cannot be deleted. F-prot has deleted a large number
of files, but there are others that cannot be repaired in the directories
that can't be deleted.

Can anyone help please,

Thanks,

D.E.



--
"I felt evil surging through me, in every fiber of my being. Pure,
undiluted evil. I could taste it."

"How's evil taste?"

"A little chalky."

 

[Miha Pihler]

Hi,

Make sure your client's server is up to date with all the latest updates!

To delete the folders you will probably have to take the ownership. Here is
how to do it.

Take Ownership of Files
http://support.microsoft.com/default.aspx?scid=kb;en-us;268019&Product=win2000

I hope this helps,

Mike

 

[Doctor Evil]

Hi,

Make sure your client's server is up to date with all the latest
updates!

To delete the folders you will probably have to take the ownership.
Here is how to do it.

Take Ownership of Files
http://support.microsoft.com/default.aspx?scid=kb;en-us;268019&Product=
win2000

I hope this helps,

Mike

Thanks so much. I was reading through the other posts above and happened
onto the security faq at:

http://securityadmin.info/faq.asp#harden

it references a ton of great information and was posted above by Torgeir
Bakken. Thanks so much for the response, and the link to the information.

Have a great one,

D.E.

--
"I felt evil surging through me, in every fiber of my being. Pure,
undiluted evil. I could taste it."

"How's evil taste?"

"A little chalky."