Any way to trace virus infected users using NT4 auditing

[anasmq]

Hi my friends

My company Exchange server was infected by Nimda virus,
and I've already got the removal. However, I want to know if there is any way to trace the infected users to facilitate the cleaning process?

any help will be appreciated

 

[Jpoandl]

I don't think so.....

However, maybe someone else will have an idea.. Joseph L. Poandl
MCSE 2000

 

[jyotessh]

hello,
Generally it will affect only in GUEST users. If you have any users like guest in the system please remove it . The main obective of this virus is to give administrative rights to guest user and fill .enl file to the system and to make the system very slow. some updates are availible in microsoft site. you can update it from there. If you have explorer of 5.0 then you have to be very careful about this virus. and people who is using IIS and exhange have to update their service packs from the microsoft web site. other wise it may create many problems.

 

[Kjonnnn]

The Corporate Edition of Nortons if you have it, will let you know.

Also you can install, manage and scan from a server machine with having to go to each box.

 

[anasmq]

So does this mean that Mcafee AntiVirus can't do the job ?!!