Remnants of ILOVEYOU virus

[dan]

We have Anti virus software (Inoculan) on our Exchange 5.5 server.
We have cleaned all viruses off the server (all drives and Information Stores).
Most new email accounts we create automatically start sending the ILOVEYOU virus as soon as they are activated.
Any suggestions?
Dan

 

[paulwood]

If you haven't already done it you need to clean out the Registry. I don't know if they have one for this specific virus, but Panda Software have free disinfection utilities.

http://www.pandasoftware.com/

Hope this helps.

 

[paulwood]

On further reflection, look at an Anti Virus library such as Network Associates

http://www.nai.com

and check what Registry Keys are added. If they aren't there, it is likely that it is a workstation that is infected. We had precisely this problem, when the workstation was disinfected, the virus didn't turn up again.