我的電腦是NT4 SERVER灌有AntiVirus7.5企業版.....
最近電腦偵測到感染w32.aliz.worm並將該病毒隔離......
我發現該病毒的產生地都是在:
D:\EXCHSRVR\imcdata\in\*
也就是說感染的位置是在我的Exchange Server裡.....
有誰知道這是什麼原因嗎?
如何根除?
因為它每隔一段時間就出現,
事件檢視器都快塞暴了.....
有此經驗的人請告訴我該如何解決!!!
謝謝囉!!!

贊助商連結

http://www.trend.com.tw/vinfo/virusencyclo/default5.asp?VName=WORM_ALIZ.A

http://securityresponse.symantec.com/avcenter/venc/data/w32.aliz.worm.html
The worm has its own SMTP engine to send mail to an SMTP Server. The address of the SMTP server is picked up from the "Internet Manager Account" registry key on the victim's computer. The actual email addresses are picked up from the WAB (Windows Address Book), which the worm finds by accessing the following registry key

HKEY_CURRENT_USER\Software\Microsoft\WAB\WAB4\Wab File Name

沒有看到解毒劑，掃毒後把他砍了