Nimda Virus
Joseph Rae
quattro at centurytel.net
Fri Nov 9 14:45:09 EST 2001
It also modifies all webcontent that is on your machine adding a little
java script load the virus when you read the website.
Kind of a pain for a web developer to fix, I used to have a script that
would clean the files, dont know if I deleted it.
Joe
-----Original Message-----
From: quattro-admin at audifans.com [mailto:quattro-admin at audifans.com] On
Behalf Of Alexander van Gerbig
Sent: Friday, November 09, 2001 10:09 AM
To: audi20v at rennlist.org; BIRA; Quattro
Subject: Nimda Virus
Well I just found the Nimda virus in my system. My anti-virus did
not detect it, but my C,D,E drives were all fully publicly shared and I
had EML files all over my drive. I manually removed all infected files,
but I read that Nimda can send itself out using my address book. So just
a warning to those out there who I have had contact with. Symantec does
have a removal tool, but it's quite easy to remove it manually. To
check look into MSCONFIG, check the System.ini tab, view all the boot
commands, look for shell=explorer.exe. If it says something to the
effect of, load.exe -dontrunold then you have Nimda.
Cheers,
Alexander van Gerbig -- '90 90q20v -- '88 80t (R.I.P)
Euro Parts Prices----------------------------
http://www.uvm.edu/~avangerb/Eurobits.html
The Audi 80 Pages---------
http://surf.to/the80pages.com
North Ferrisburg, VT 05473
More information about the quattro
mailing list