[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ntbugtraq
Subject:    Update on W32.Nimda.A@mm/TROJ_NIMDA.A
From:       Anthony Paulina <APaulina () ACUENT ! COM>
Date:       2001-09-18 23:41:50
[Download RAW message or body]

Well I just installed McAfee's latest virus definitions for Netshield,
Superdat 4159, set my scanning software to clean the infected files
automatically, and watched McAfee tell me that they couldn't be cleaned, and
that McAfee deleted all the infected files. This of course, guarantees that
my infected server is now completely useless. Each of the files that McAfee
found to be infected, had an *.eml copy created for it... Note, I also
noticed that the guest account was enabled, and then added into the local
administrators group. This occurred around 4:15am, the *.eml files started
cropping up around 9:30am...

Anthony Paulina
Acuent Inc.
199 Cherry Hill Road
Parsippany, NJ 07054
email: apaulina@acuent.com
Phone: (973)541-4285
Fax: (973)541-2540

============================================================================
Delivery co-sponsored by Trend Micro, Inc.
============================================================================
TREND MICRO SCANMAIL FOR EXCHANGE 2000 -- SECOND to NONE

If you are worried about email viruses, you need Trend Micro ScanMail for
Exchange. ScanMail is the first antivirus solution that seamlessly
integrates with the Microsoft Exchange 2000 virus-scanning API 2.0. ScanMail
ensures 100% inbound and outbound email virus scanning and provides remote
software management. Download a FREE 30-day trial copy of ScanMail and find
out why it is the best:
http://www.antivirus.com/banners/tracking.asp?si=8&BI;=240&UL;=/smex2000
============================================================================

[prev in list] [next in list] [prev in thread] [next in thread]