Nimda Virus

Joseph Rae quattro at centurytel.net
Fri Nov 9 14:45:09 EST 2001


It also modifies all webcontent that is on your machine adding a little
java script load the virus when you read the website.
Kind of a pain for a web developer to fix, I used to have a script that
would clean the files, don’t know if I deleted it.

Joe


-----Original Message-----
From: quattro-admin at audifans.com [mailto:quattro-admin at audifans.com] On
Behalf Of Alexander van Gerbig
Sent: Friday, November 09, 2001 10:09 AM
To: audi20v at rennlist.org; BIRA; Quattro
Subject: Nimda Virus


    Well I just found the Nimda virus in my system.  My anti-virus did
not detect it, but my C,D,E drives were all fully publicly shared and I
had EML files all over my drive.  I manually removed all infected files,
but I read that Nimda can send itself out using my address book. So just
a warning to those out there who I have had contact with.  Symantec does
have a removal tool, but it's quite easy to remove it manually.  To
check look into MSCONFIG, check the System.ini tab, view all the boot
commands, look for shell=explorer.exe.  If it says something to the
effect of, load.exe -dontrunold then you have Nimda.

Cheers,

Alexander van Gerbig -- '90 90q20v -- '88 80t (R.I.P)

Euro Parts Prices----------------------------
http://www.uvm.edu/~avangerb/Eurobits.html

The Audi  80 Pages---------
http://surf.to/the80pages.com

North Ferrisburg, VT 05473






More information about the quattro mailing list