PDA

View Full Version : I-Worm/Nimda VIRUS



muckshifter
09-18-2001, 05:52 PM
I-Worm/Nimda
============

A new mass mailing virus is In the Wild - I-Worm/Nimda.
Spreads as attached file readme.exe and is also able to use for
its spreading similiar trick as CodeRed worm.

Update for AVG Anti-Virus System will be available on our web pages
soon today.

--
GRISOFT Inc.
Developers of AVG Anti-Virus System

:mad:

...Yup...That's it...
It's kinda cute...copies to every directory under the share...Someone is bound to click on the eml file when it eventually shows up on a desktop if C: is shared.

Tell your users, as always, DON'T CLICK ON SOMETHING YOU DON'T RECOGNIZE! That's what happened at our office *sigh*...

:grr:

muckshifter
09-18-2001, 06:14 PM
By Robert Lemos
Special to CNET News.com
September 18, 2001, 2:45 p.m. PT

update
A computer worm that spreads to both servers and PCs running Microsoft software flooded the Internet with data Tuesday, but the FBI said that, as of yet, it sees no link to last week's terrorist attack.

Known as "Nimda" or "readme.exe," the worm spreads by sending infected e-mail messages, copying itself to computers on the same network, and compromising Web servers using Microsoft's Internet Information Server (IIS) software

http://news.cnet.com/news/0-1003-200-7215349.html?tag=dd.ne.dht.nl-sty.0

An FBI representative said the agency was "assessing" the incident, but so far it found no relationship between the online deluge and last week's terrorist attacks on the World Trade Center and the Pentagon.

"There has been no indication that this is linked (to Tuesday's) attack," said FBI spokeswoman Debbie Weierman. "That is the question of the day."

We are recommending to sites that they verify the state of security patches on all IIS servers and e-mail client software,"

:grr: