RE: IIS becomes slow after Trojon attack

From: Tim Coffey (timcof_at_online.microsoft.com)
Date: 02/10/04


Date: Tue, 10 Feb 2004 04:10:38 GMT

If you have been hit by a trojan, then MS recommends rebuilding the box completely. For more, try here:
microsoft.public.inetserver.iis.security

Thank you. I hope this information is helpful.

Tim Coffey [MSFT]

This posting is provided “AS IS” with no warranties, and confers no rights. You assume all risk for your use. © 2001 Microsoft Corporation. All rights reserved.
--------------------
| Content-Class: urn:content-classes:message
| From: "Dinesh" <dinub75@hotmail.com>
| Sender: "Dinesh" <dinub75@hotmail.com>
| Subject: IIS becomes slow after Trojon attack
| Date: Fri, 16 Jan 2004 21:20:09 -0800
| Lines: 7
| Message-ID: <040901c3dcb9$932398f0$a501280a@phx.gbl>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Thread-Index: AcPcuZMjooaTuhjAQ3WDEdGcJsV5bA==
| Newsgroups: microsoft.public.inetserver.iis
| Path: cpmsftngxa07.phx.gbl
| Xref: cpmsftngxa07.phx.gbl microsoft.public.inetserver.iis:291165
| NNTP-Posting-Host: tk2msftngxa13.phx.gbl 10.40.1.165
| X-Tomcat-NG: microsoft.public.inetserver.iis
|
| Dear Friends,
|
| After Trojon attack IIS becomes very slow please tell
| some tools to come back to normal IIS and FTP.
|
| Thanks
| Dinesh
|



Relevant Pages

  • RE: Access requires password
    ... | Content-Class: urn:content-classes:message ... Microsoft CDO for Windows 2000 ... | I have checked NT settings and all the settings on IIS ...
    (microsoft.public.inetserver.iis.security)
  • RE: New User: IIS Missing
    ... | Content-Class: urn:content-classes:message ... | Subject: New User: IIS Missing ... | My pre-loaded Windows 2000 does not have it and I need it ... Please subscribe to the FREE Microsoft® Security Notification Service on ...
    (microsoft.public.win2000.new_user)
  • RE: FTP and IIS HACK!!!
    ... Disable posix install into a new dir, update machine with newest IIS rollup ... | Content-Class: urn:content-classes:message ... | Sender: "David Little" ... | FTP server is stoppped and a version of serv-u is started ...
    (microsoft.public.inetserver.iis.security)
  • RE: IIS5 locked down
    ... | Content-Class: urn:content-classes:message ... Produced By Microsoft MimeOLE V5.50.4910.0300 ... | installed SUS, Software Update System, from Microsoft. ... | locked down IIS as part of the installation, ...
    (microsoft.public.inetserver.iis.security)
  • RE: IIS 4.0
    ... It sounds like Office is trying to load somthing that is dependent on IIS, ... | Content-Class: urn:content-classes:message ... Upon inserting Setup disk, I am ...
    (microsoft.public.inetserver.iis)