RE: W32.Nimda Infecting Executables !!!! :-(

From: Royans Tharakan (RTharakanat_private)
Date: Wed Sep 19 2001 - 09:26:42 PDT

  • Next message: Sam Ferrell: "Re: Nimda Worm"

    http://vil.nai.com/vil/virusSummary.asp?virus_k=99209#Symptoms
    
    I quote...
    "Those using earlier versions of the DATS (< 4160), Extra.dat(< ver 4),
    or SuperExtra(< ver 4) should update to the latest available as noted
    below. Once you have updated to the 4160 DAT files, delete any EXTRA.DAT
    files that you may be using. "
    
    This should make CLEANING work in NAV too.
    
    -----Original Message-----
    From: Steve Halligan [mailto:agent33at_private]
    Sent: Wednesday, September 19, 2001 7:57 AM
    To: 'Owen Creger'; 'incidentsat_private'
    Subject: RE: W32.Nimda Infecting Executables !!!! :-(
    
    
    
    > We obtained a virus update from Symantec and started scanning 
    > our systems.
    > Norton Anti-Virus has been finding numerous infected exe's including
    > wordpad.exe and many other executables. :-(
    > NAV is unable to clean the files and can only quarantine them :-(
    > Enjoy rebuilding your servers :-(
    > 
    
    McAfee is CLEANING the infected executables.  Norton is deleting them.
    I
    suggest getting your hands on a copy of Virusscan or Netshield to do the
    cleaning portain at least.
    
    -Steve
    
    ------------------------------------------------------------------------
    ----
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Wed Sep 19 2001 - 09:55:38 PDT