I went on travel this past weekend only to return and find my computer
was infected with three types of Nimda viruses.  Specifically, they are

        1. W32.Nimda.A@mm (dll) virus.
        2. W32.Nimda.E@mm (dr) virus.
        3. W32.Nimda.A@mm (dr) virus.

42 files were infected.  18 files were in C:\Inetpub\scripts\ and were
all named like...

C:\Inetpub\scripts\TFTP860
C:\Inetpub\scripts\TFTP952


I have no idea where these files came from.  18 other files came from
C:\WINNT\Temp\ and were all named like...

C:\WINNT\Temp\mep914.tmp.exe
C:\WINNT\Temp\mep916.tmp.exe


Again, I have no idea where these came from.  Finally, four files that I
would have thought would have been installed in a different directory
were...

C:\Admin.dll
C:\httpodbc.dll
D:\Admin.dll
D:\httpodbc.dll

Norton Antivirus could not repair them.  They have all been quarantined.
What happened?  I was going to anyways uninstall IIS5 from the C: drive
and install it on the D: drive.  Will this fix any potential problems my
computer may have down the road.  Is this false reporting on Norton's
part?

Please enlighten me! :)

Gregory J Toland
Sr. Systems Architect
XWare Systems Inc.
1643 South Tenth Street
Arlington, VA 22204
(703) 979-8378 (Office)
(703) 655-5766 (Mobile)
[EMAIL PROTECTED]


------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to