NOT SURE ABOUT THAT HAVENT NOTICED IT BUT I DO KNOW THAT IT ADDS A LINE TO
THE SHELL=EXPLORER.EXE LINE WITHIN THE SYSTEM.INI FILE. ALSO ADDS LINES TO A
FILE CALLED WINIT.INI AND YOU MUST DELETE ALL OF THOSE LINES AS WELL. AFTER
THAT YOU SHOULD DO A SEARCH FOR ALL *.EML FILES AND DELETE THEM. NEXT I
WOULD DELETE ALL TEMP FILES AND ALSO TEMORARY INTERNET FILES. SCAN YOU HARD
DRIVES IF YOU HAVE A VIRUS SCAN. ALSO ON MY SERVER IT SOME HOW CORRUPTED MY
TREND SERVER PROTECT AND DIDNT LET ME START THE SERVICES. ALSO IF A CLIENT
IS INFECTED YOU WILL NOTICE ON A BOOT UP THAT OUTLOOK EXPRESS WILL TRY TO
START UP AND COMPOSE AN EMAIL (NOT SURE IF IT CAN SEND IT THOUGH BUT I THINK
IF YOU ARE SET UP WITH OUTLOOK EXPRESS IT WILL SEND IT. ALSO I NOTICED IT
TRIES TO SOMETIME OPEN WINDOWS MEDIA PLAYER AND IM NOT SURE WHAT THIS FILE
IS.
-----Original Message-----
From: Josefowski, Larry [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 1:56 PM
To: Exchange Discussions
Subject: RE: Nimda
I assume it also forces a lock of the Caps Lock key?
-----Original Message-----
From: Tener, Richard [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 1:56 PM
To: Exchange Discussions
Subject: RE: Nimda
I GOT NAILED BY IT I WAS AT WORK FOR 36 HOURS STRAIGHT TRYING TO FIGURE OUT
HOW TO FIX IT.
FINIALLY I GOT ABOUT 98% OF THE VIRUS OFF ALL MY WORKSTATIONS. AND 100% OFF
THE SERVER. MAN THIS VIRUS REALLY CLOGS YOUR SYSTEM AND SCREWS UP ALOT OF
PROGRAMS MOSTLY OFFICE 200O
-----Original Message-----
From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 1:50 PM
To: Exchange Discussions
Subject: RE: Nimda
We have not had any come in through email.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Martin Tuip
Sent: Thursday, September 20, 2001 10:50 AM
To: Exchange Discussions
Subject: Re: Nimda
I got none ... guess I don't have any friends ;)
--------------------------
Martin Tuip
MVP Exchange
Exchange2000 List owner
www.exchange-mail.org
--------------------------
----- Original Message -----
From: "John Martinez" <[EMAIL PROTECTED]>
To: "Exchange Discussions" <[EMAIL PROTECTED]>
Sent: Thursday, September 20, 2001 7:32 PM
Subject: Nimda
> Did everyone get nailed by Nimda? This list is dead today!
>
> I got eight hits from it last night. Thank god for proper working
antivirus
> apps!
>
> John
>
> _________________________________________________________________
> List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe: mailto:[EMAIL PROTECTED]
> Exchange List admin: [EMAIL PROTECTED]
>
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
