was Virus fix---Network Associates' fixes/filters, etc

Thu Sep 20 18:50:51 UTC 2001

Network Associates' Mcafee business unit has released a stand alone tool to
remove the nimda virus/worm. See this web page for more information:

http://vil.nai.com/vil/virusSummary.asp?virus_k=99209
<http://vil.nai.com/vil/virusSummary.asp?virus_k=99209> 

Obviously, existing anti-virus software DATs have also been released.

Network Associates' Sniffer business unit has released Sniffer filters to
assist
with identifying infected machines. There is even a way to set up an alert
to
send an email once the worm's signature traffic is detected on a network.
See this web page for the filter and more information:

http://www.sniffer.com/other/jump/nimda-filter.asp
<http://www.sniffer.com/other/jump/nimda-filter.asp> 

I am not authorized/~/able to answer software specific support questions--so
please
do not contact me with those.  :-)  However, if I see a generic question
posted to
this list about the worm that I can answer, I will do so...time permitting. 

Thanks,
-BM

 -----Original Message-----
From: Eric Germann [mailto:ekgermann at cctec.com]
Sent: Thursday, September 20, 2001 7:53 AM
To: Indra PRAMANA; Andras Bellak
Cc: Steve Smith; nanog at nanog.org
Subject: RE: Trend Micro FIX_NIMDA.EXE - was Re: Virus fix

-----Original Message-----
From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu]On Behalf Of Indra
PRAMANA
Sent: Wednesday, September 19, 2001 11:56 PM
To: Andras Bellak
Cc: Steve Smith; nanog at nanog.org
Subject: RE: Trend Micro FIX_NIMDA.EXE - was Re: Virus fix

Andras,

At 07:46 PM 9/19/01 -0700, Andras Bellak wrote:

Norton released a definition file yesterday that cleaned everything but the
.eml files and made the systems resistant to re-infection. They released an
update today that got the .eml files as well. 

Yes, but this requires us to install the antivirus software as well. Do you
know any tools like FIX_NIMDA.EXE that can fix the problem automatically
without having to use the antivirus software?

I still haven't seen anything that cleans up the htm, html, asp, etc files,
but there are a few utilities that work fine for doing that one.

What are the utilities? Where can I get them?

Norton Antivirus will clean most of the htm, html, asp, etc files.
http://www.symantec.com

Thank you for your help.

Cheers. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20010920/8e7de3f3/attachment.html>