Backdoor.Sadmind - Removal

Delete all files detected by Norton Antivirus as Backdoor.Sadmind or Backdoor.Sadmind.Dr.

A patch is available from Microsoft at
http://www.microsoft.com/technet/security/bulletin/MS00-078.asp

NOTE: This patch is included in Service Pack 2


For IIS Version 4:
http://www.microsoft.com/ntserver/nts/downloads/critical/q269862/default.asp


For IIS Version 5:
http://www.microsoft.com/windows2000/downloads/critical/q269862/default.asp


Additional advice on securing IIS web servers is available from
http://www.microsoft.com/technet/security/iis5chk.asp
http://www.microsoft.com/technet/security/tools.asp


Apply a patch from Sun Microsystems as described in Sun Security Bulletin #00191:
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/191&type=0&nav=sec.sba

Technical Details