I just notice NIMDA is ADMIN spelled backwards - I been running so fast
trying to beat this thing -
Badges ......... We don't need no stinkin' badges
Thank you,
Robert Saylors
Technical Services Manager
The FoxBerry Group
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jeffrey Kessler
Sent: Thursday, September 20, 2001 4:31 PM
To: NT 2000 Discussions
Subject: RE: New Virus - NIMDA -**IMPORTANT!!!**
If its the same instructions I just looked for you also need to contact the
US Secret Service and the Austrailian Federal Police.
Jeffrey Kessler MCSE MCP+I
Technology Coordinator
Newport (NH) School District
603-863-2414 ext 1116
[EMAIL PROTECTED]
> -----Original Message-----
> From: Wes Owen [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, September 20, 2001 3:57 PM
> To: NT 2000 Discussions
> Subject: RE: New Virus - NIMDA -**IMPORTANT!!!**
>
>
> I don't know that I would trust these solutions.
>
> The last thing I saw from CERT is that the machine should be
> completely
> rebuilt to insure a proper cleanup.
>
> -----Original Message-----
> From: Robert Saylors [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, September 20, 2001 2:38 PM
> To: NT 2000 Discussions
> Subject: RE: New Virus - NIMDA -**IMPORTANT!!!**
> Importance: High
>
>
> I have 2 Windows NT workstations that were infected. I ran
> the FIXNIMBA tool
> from Trend and it finds nothing now. But when we try to run
> Event Viewer we
> receive a Dr. Watson error. On the second station we try to
> run any app,we
> get a Dr. Watson error, is there a seperate repair for Windows NT
> Workstation 4.0 SP 6.0A?
>
>
> Thank you,
>
> Robert Saylors
> Technical Services Manager
> The FoxBerry Group
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Adam Smith
> Sent: Wednesday, September 19, 2001 8:34 PM
> To: NT 2000 Discussions
> Subject: RE: New Virus - NIMDA -**IMPORTANT!!!**
>
>
>
> > Just thought you all should now, it hasn't been disclosed
> yet but this
> > virus also has an FTP component that scans for often-used
> directories
> > (pub, incoming, etc...) and attempts a MKDIR command to see if it's
> > writeable, and if it is, it propagates into those ftp directories.
> > This info was provided by Mark C. here at my site and I
> appreciate his
> > info. He has posted this info but it hasn't shown up in any
> > of the official reports yet on the commercial virus sites.
>
> After downloading drivers from ftp1.us.dell.com Sophos told
> me they were
> infected with this virus.
>
> I guess that goes to show the extent of its damage.
>
>
> Adam
>
>
>
>
>
> ************** Email Confidentiality Clause **************
> The information contained within this email and its
> attachments is intended
> for the named recipients only. It may contain privileged and
> confidential
> information. If you are not the intended recipient, you must not copy,
> distribute or take any action in reliance on it. If you have
> received this
> email in error, please return it to the originator advising
> of the error and
> delete all copies of it from your system.
>
>
>
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to [EMAIL PROTECTED]
>
>
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to [EMAIL PROTECTED]
>
>
> This e-mail and any files transmitted with it are
> confidential and are intended solely for the use of the
> individual or entity to whom they are addressed. If you are
> NOT the intended recipient or the person responsible for
> delivering the e-mail to the intended recipient, be advised
> that you have received this e-mail in error and that any use,
> dissemination, forwarding, printing, or copying of this
> e-mail is strictly prohibited.
>
>
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to [EMAIL PROTECTED]
>
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
