Hi, Doug and other interested parties....

On Wed, 19 Sep 2001 14:33:51 -0600 GMT your local time, which was
Wednesday, September 19, 2001, 2:33 PM -0700 GMT here,
you wrote:

KR>> ... desktop.eml was created late last night. ... the file
KR>> contains the Nimda virus.

KR>> DO NOT DOWNLOAD THIS FILE!

> Do we have a mole on this list?

My guess is that the NetManage ftp server was hit and the file created
by the attack software. The same file is present in both the echo4 and
echopro4 directories (and probably others as well, although I didn't
check).

KR>> ...I am unable to view the getstart.pdf file. If
KR>> anyone has a good copy of this file, would you mind sending it to me?

> I searched on it & don't have it. I suggest you download it again,
> and that we take discussing PIMs off list.

I tried downloading it again and it was still unusable. I found the
same file in the ecco4 directory and it worked.

I posted here only because I thought others who had seen your message
might go to the download page, and this is a very serious virus. I
think both TBOT and Andrew's list are appropriate for continuing
discussion. I have already joined powertoolssoftware and posted a
warning there, as well, but the last time I checked it hadn't shown
up.


--
 Keith Russell
 mailto:[EMAIL PROTECTED]


-- 
________________________________________________________
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Unsubscribe: mailto:[EMAIL PROTECTED]
Latest Vers: 1.53d

Reply via email to