Well,
We got bit by the virus. :| From what I can tell, my network was infected by corporate, all my PCs are clean, one server had 1 riched20.dll infected, and the main new server that the consultant built I just started scanning, but I know it has quite a few infected files, and the main new server has a share to corporate.
All of the Win2K boxes I have are up to date, but every server and some PCs at corporate are infected. Appears that they got hit sometime before noon, and didn't notice until late in the afternoon. I didn't get notification until after 5 when I got out of a meeting. One of our users had started noticing these funny .eml files appearing on our main data server, so I new we were infected, and took immediate steps and disconnected the network from the Internet and Corporate VPN, then did some research, decided to shut everything down, disconnected everything from the network, and started bringing each box up and scanning for virus'. Once every server has been scanned, and all PCs & servers are clean, I will re-connect them, but will probably leave the Internet connection/VPN connection down until I know that corporate has their stuff cleaned up.
Dasm viruses. :| The department had a big meeting today, and they were taking everyone out for drinks and dinner at a nice steak house. Guess who missed a free meal!
