mcAfee is offering a quarantine for the worm. http://vil.mcafee.com/dispVirus.asp?virus_k=99209&#removal_instructions Robert Hinojosa [EMAIL PROTECTED] 972.243.4343 x7446 -----Original Message----- From: Gregory Price [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 18, 2001 3:24 PM To: [EMAIL PROTECTED] Subject: Re: Terrorist Virus hits the net - PLEASE READ Anyone who hears of or finds a fix for NIMDA please post!!!!!!! thanks Greg ----- Original Message ----- From: "Nagy, Dominic" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, September 18, 2001 1:11 PM Subject: RE: Terrorist Virus hits the net - PLEASE READ > Seth: > > I've received it. > > > -----Original Message----- > From: Seth Bienek [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, September 18, 2001 1:02 PM > To: [EMAIL PROTECTED] > Subject: RE: Terrorist Virus hits the net - PLEASE READ > > > My Digitaris email is not working correctly. I tried to send it, but I > don't think it made it through. Would you re-send it, to make sure? > > Thanks, > > Seth > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On > > Behalf Of Dave Cahall > > Sent: Tuesday, September 18, 2001 12:39 PM > > To: '[EMAIL PROTECTED]' > > Subject: RE: Terrorist Virus hits the net - PLEASE READ > > > > > > Did yo send this to everyone at Digitaris? > > > > Dave Cahall > > Vice President, Professional Services > > Digitaris Technologies, Inc. > > Office: 972.690.4131 ext 116 > > Mobil: 214.914.9947 > > > > > > -----Original Message----- > > From: Seth Bienek [mailto:[EMAIL PROTECTED]] > > Sent: Tuesday, September 18, 2001 12:27 PM > > To: [EMAIL PROTECTED] > > Subject: Terrorist Virus hits the net - PLEASE READ > > Importance: High > > > > > > > > This new worm, considered VERY volatile, propagates 3 ways - via known IIS > > exploits as well as through Outlook mass-emailing, AND it can be > > transmitted > > from a web server to a browser viewing any of it's pages. > > > > "Web servers compromised by this worm apparently attach a "readme.eml" to > > all web pages served... and due to a bug in IE5, it will automatically > > execute the file!" > > http://slashdot.org/article.pl?sid=01/09/18/151203&mode=flat > > > > Once the virus is set up on a client machine, it opens up shared access to > > C:\. It is speculated that this virus is setting up zombie systems to > > prepare for a massive denial-of-service attack on the United > > States' finance > > and communications infrastuctures. > > http://www.nipc.gov/warnings/advisories/2001/01-021.htm > > > > Details are still sketchy as to what else this virus can do, but it is > > imperative that servers be patched and repaired right away. > > > > > > What to do: > > > > Make sure your networks' clients are running patched versions of IE 5 or > > higher. > > > > Get the patch here: > > http://www.microsoft.com/windows/ie/downloads/critical/q290108/default.asp > > > > Or update to IE55 Service Pack 2: > > http://www.microsoft.com/windows/ie/downloads/recommended/ie501sp2 > /default.a > sp > > > Make sure your IIS servers are running all the correct patches. > > NT 4 Security Update: > http://www.microsoft.com/ntserver/nts/downloads/critical/q301625/download.as > p > > Windowss 2000 Security Update: > http://www.microsoft.com/Windows2000/downloads/critical/q301625/download.asp > > > Best Regards, > > Seth Bienek > > > > ------------------------------------------------------------------------- > This email server is running an evaluation copy of the MailShield anti- > spam software. Please contact your email administrator if you have any > questions about this message. MailShield product info: www.mailshield.com > > ----------------------------------------------- > To post, send email to [EMAIL PROTECTED] > To subscribe / unsubscribe: http://www.dfwcfug.org > > ------------------------------------------------------------------------- > This email server is running an evaluation copy of the MailShield anti- > spam software. Please contact your email administrator if you have any > questions about this message. MailShield product info: www.mailshield.com > > ----------------------------------------------- > To post, send email to [EMAIL PROTECTED] > To subscribe / unsubscribe: http://www.dfwcfug.org > > > > ------------------------------------------------------------------------- > This email server is running an evaluation copy of the MailShield anti- > spam software. Please contact your email administrator if you have any > questions about this message. MailShield product info: www.mailshield.com > > ----------------------------------------------- > To post, send email to [EMAIL PROTECTED] > To subscribe / unsubscribe: http://www.dfwcfug.org > > ------------------------------------------------------------------------- > This email server is running an evaluation copy of the MailShield anti- > spam software. Please contact your email administrator if you have any > questions about this message. MailShield product info: www.mailshield.com > > ----------------------------------------------- > To post, send email to [EMAIL PROTECTED] > To subscribe / unsubscribe: http://www.dfwcfug.org > ------------------------------------------------------------------------- This email server is running an evaluation copy of the MailShield anti- spam software. Please contact your email administrator if you have any questions about this message. MailShield product info: www.mailshield.com ----------------------------------------------- To post, send email to [EMAIL PROTECTED] To subscribe / unsubscribe: http://www.dfwcfug.org ------------------------------------------------------------------------- This email server is running an evaluation copy of the MailShield anti- spam software. Please contact your email administrator if you have any questions about this message. MailShield product info: www.mailshield.com ----------------------------------------------- To post, send email to [EMAIL PROTECTED] To subscribe / unsubscribe: http://www.dfwcfug.org
