posted
This info was sent to me from a top computer programer, in a letter to his dad..........bronzeo
This is a warning that there is a *very* bad virus spreading very fast > > across the world today. I spent about 8 hours trying to clean it off of > my > > web server in Washington DC today. Apparently it infected one of the > other > > computers hosted by the same company, and once on their internal network, > > spread through some holes in Microsoft NT to all of their other servers, > > including mine. It ended up overwriting every web page on my site with > > modified files that would cause people who surfed to my site to get a > virus > > downloaded to them! Thats right, no opening attachments...just the simple > > act of viewing the web page would download the virus to their system. > > That's why it's spreading so fast. > > I've seen many Internet sites affected today. The official count is over > 1 > > million web sites affected. I restored all of my files from a backup > after > > patching the Microsoft hole, so I think our site is safe now. > > > > So, make sure you first go to the web site for your virus software > (McAfee, > > Norton, whatever). Download their latest virus definition files (Dat > files) > > to update your virus software. All of them now protect against this new > > virus, so then you should be safe. Do not surf to *any* other web sites > > till you have updated your virus software. Once you get the virus, it's > > very hard to get rid of. > > > > To tell if you have the virus already or not, run NotePad and open the > > SYSTEM.INI file. If one of the first couple of lines looks like this: > > > > Shell=explorer.exe load.exe -dontrunold > > > > then you have the virus. > > > > The virus is called NIMDA (that's "Admin" spelled backwards). It was > first > > detected at about 9:08am this morning, coinciding with last weeks attack. > > It is a *very* sophisticated virus. A normal virus uses a single hole or > > method to infect or spread. NIMDA uses 16 different methods...basically > all > > of the major methods used in the last year or so. It's the first virus to > > rewrite web pages to cause itself to download by just viewing a web page. > > The FBI is investigating and claims no known association with the trade > > center attack last week, but I'm not so sure. This virus is the most > > sophisticated one ever seen and it's timing can't be a coincidence. I > hope > > the people who did this get punished bad. It's just another form of > > terrorism. > > The virus was mentioned in a press conference by the Attorney General > today > > in passing, but hasn't gotten much news coverage at all. My guess is that > > they don't want to get everyone upset and panicking again. > > So far, it doesn't look like the virus does anything bad to your system, > > other than to spread itself, causing your computer and network connection > to > > get slow. But who knows what is lurking in there. It certainly was bad > > enough to keep my web site down for about 8 hours. > > > > Anyway, go update your virus software. This is a nasty one. > > > > Mike
-------------------- "Don't change horses in midstream, unless you spot one with longer legs" bronzeo oti Jack Davis 1410 Main St Joplin, MO 64801 www.imagemakerart.com jack@imagemakerart.com
Posts: 1549 | From: Joplin, MO | Registered: Mar 2000
| IP: Logged |
posted
Adrienne, you can go to 'run' from your start bar and type in sysedit.exe and it will load 5 ini files, one being system.ini. Or you can open it with notepad, it's in the windows directory.
Posts: 797 | From: Olympia, WA | Registered: Nov 1998
| IP: Logged |
posted
Glen, I read somewhere that it effects from windows (95 to ME) and also NT would probably include W2000 pro, as it is NT based.
-------------------- "Don't change horses in midstream, unless you spot one with longer legs" bronzeo oti Jack Davis 1410 Main St Joplin, MO 64801 www.imagemakerart.com jack@imagemakerart.com Posts: 1549 | From: Joplin, MO | Registered: Mar 2000
| IP: Logged |