I don't know that I would trust these solutions.
The last thing I saw from CERT is that the machine should be completely
rebuilt to insure a proper cleanup.
-----Original Message-----
From: Robert Saylors [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 20, 2001 2:38 PM
To: NT 2000 Discussions
Subject: RE: New Virus - NIMDA -**IMPORTANT!!!**
Importance: High
I have 2 Windows NT workstations that were infected. I ran the FIXNIMBA tool
from Trend and it finds nothing now. But when we try to run Event Viewer we
receive a Dr. Watson error. On the second station we try to run any app,we
get a Dr. Watson error, is there a seperate repair for Windows NT
Workstation 4.0 SP 6.0A?
Thank you,
Robert Saylors
Technical Services Manager
The FoxBerry Group
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Adam Smith
Sent: Wednesday, September 19, 2001 8:34 PM
To: NT 2000 Discussions
Subject: RE: New Virus - NIMDA -**IMPORTANT!!!**
> Just thought you all should now, it hasn't been disclosed yet but this
> virus also has an FTP component that scans for often-used directories
> (pub, incoming, etc...) and attempts a MKDIR command to see if it's
> writeable, and if it is, it propagates into those ftp directories.
> This info was provided by Mark C. here at my site and I appreciate his
> info. He has posted this info but it hasn't shown up in any
> of the official reports yet on the commercial virus sites.
After downloading drivers from ftp1.us.dell.com Sophos told me they were
infected with this virus.
I guess that goes to show the extent of its damage.
Adam
************** Email Confidentiality Clause **************
The information contained within this email and its attachments is intended
for the named recipients only. It may contain privileged and confidential
information. If you are not the intended recipient, you must not copy,
distribute or take any action in reliance on it. If you have received this
email in error, please return it to the originator advising of the error and
delete all copies of it from your system.
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
This e-mail and any files transmitted with it are confidential and are intended solely
for the use of the individual or entity to whom they are addressed. If you are NOT the
intended recipient or the person responsible for delivering the e-mail to the intended
recipient, be advised that you have received this e-mail in error and that any use,
dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited.
------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
