virus warning/copy of message
Posted by
carlcnc@e...
on 2001-09-19 11:07:41 UTC
Jon,others
my mistake,I didn't check that the message was avaiable at the isp
site
I "assumed",
below is the body of the message
Carl
Virus Name: w32.nimda.aa.mm
Virus Code Name: I-Worm/Nimda
This virus has been detected circulating the Internet today. It has
several features that are common to many other viruses on the net, but
has additional features that makes this virus particularly dangerous.
You do NOT have to be running a server to be infected. It infects all
Windows based machines including Windows 95, Windows 98, Windows ME,
Windows NT, Windows 2k, and Windows XP.
This worm originally infects windows based web servers. On the
windows
based infected server several things occur. First the machine, is
made
vulnerable to additional hacking, then the server has several trojan
files added to every directory on the server. Once the Windows based
server is fully infected in this manner, the worm modifies all of the
server's web pages to include an automatic download of the worm to web
site visitors.
Upon completion of these modifications, the infected machine starts
trying to connect to other web servers on the Internet in an attempt
of
finding another vulnerable Windows based server. The effect of this
is
to generate hundreds to thousands of requests to machines connected to
the Internet. The probing generates the same effect as a denial of
service attack on machines through out the Internet.
If an unsuspecting customer accidentally browses an infected Windows
based server, the customer would automatically receive a copy of the
worm from the infected server. The virus/worm in addition to all of
the
above mentioned things that it does, it also emails itself to everyone
in the customers email address book.
As of this morning, none of the Anti-Virus programs on the market
could
detect or clean the worm from an infected machine. All Anti-Virus
manufacturers are working to correct this deficiency. Grisoft AVG
released an update earlier this afternoon to detect this Virus/Worm.
Although it can detect the virus, it still is unable to clean the worm
from the infected machine.
What can you as a consumer do to protect yourself from this virus?
------------------------------------------------------------------
1. You should update your antivurus software from your antivirus
companies web site.
2. Pay close attention to any attachments that arrive by email. Do
NOT
open them if they are called README.exe or README.eml.
3. Limit your Internet browsing to servers that you trust, for the
next
couple of days or at least until you have an effective anti-virus
program running against this virus.
4. Get an Anti-virus Program if you do not already have one. We would
recommend AVG by Grisoft.
http://www.grisoft.com/
my mistake,I didn't check that the message was avaiable at the isp
site
I "assumed",
below is the body of the message
Carl
Virus Name: w32.nimda.aa.mm
Virus Code Name: I-Worm/Nimda
This virus has been detected circulating the Internet today. It has
several features that are common to many other viruses on the net, but
has additional features that makes this virus particularly dangerous.
You do NOT have to be running a server to be infected. It infects all
Windows based machines including Windows 95, Windows 98, Windows ME,
Windows NT, Windows 2k, and Windows XP.
This worm originally infects windows based web servers. On the
windows
based infected server several things occur. First the machine, is
made
vulnerable to additional hacking, then the server has several trojan
files added to every directory on the server. Once the Windows based
server is fully infected in this manner, the worm modifies all of the
server's web pages to include an automatic download of the worm to web
site visitors.
Upon completion of these modifications, the infected machine starts
trying to connect to other web servers on the Internet in an attempt
of
finding another vulnerable Windows based server. The effect of this
is
to generate hundreds to thousands of requests to machines connected to
the Internet. The probing generates the same effect as a denial of
service attack on machines through out the Internet.
If an unsuspecting customer accidentally browses an infected Windows
based server, the customer would automatically receive a copy of the
worm from the infected server. The virus/worm in addition to all of
the
above mentioned things that it does, it also emails itself to everyone
in the customers email address book.
As of this morning, none of the Anti-Virus programs on the market
could
detect or clean the worm from an infected machine. All Anti-Virus
manufacturers are working to correct this deficiency. Grisoft AVG
released an update earlier this afternoon to detect this Virus/Worm.
Although it can detect the virus, it still is unable to clean the worm
from the infected machine.
What can you as a consumer do to protect yourself from this virus?
------------------------------------------------------------------
1. You should update your antivurus software from your antivirus
companies web site.
2. Pay close attention to any attachments that arrive by email. Do
NOT
open them if they are called README.exe or README.eml.
3. Limit your Internet browsing to servers that you trust, for the
next
couple of days or at least until you have an effective anti-virus
program running against this virus.
4. Get an Anti-virus Program if you do not already have one. We would
recommend AVG by Grisoft.
http://www.grisoft.com/