Here is some helpful info and
links that I have compiled. Please pass it on to anyone you know outside
of Skirbal who may need the info and links to updates. I have downloaded
some updates for major antivirus software and Windows updates and made
them available on Saturn for fast downloads. You will find the links below.
THIS
VIRUS DOES NOT INFECT MACINTOSH COMPUTERS!
However, all users, please limit your Internet usage to only the
most needed tasks. Please, do not use Real Player, any Internet
radios, AIM and other messengers, and of course any mp3 music downloading
software (which you should NOT be using anyway) and avoid unnecessary
ftp and web downloads as well.
How
to protect your PC against Nimda
Please
use Windows Update to download all latest security patches, system
updates and MS Office updates (they include Outlook security patches).
You should do this on a regular basis! I know that some people
don't like to do this but you have to! Also, keep your antivirus
software up to date! Even you use Netscape and Eudora on Windows
you may be vulnerable as well.
The Nimda worm uses the Unicode Web Traversal exploit.
A patch and information regarding this exploit can be found at
this
location.
You don't need this patch if you have Service Pack 6a for
NT or 2 for 2000 installed. It is recommended that you install
the appropriate Service Pack rather than this patchm, unless you
have specific reason for not installing a Service Pack (software
compatibility, etc.
Or from Saturn:
Security Update, August 15, 2000 for IIS 4.0 server only (WinNT
- requiresSP5 or higher). Click
here to download
Security Update, August 15, 2000 for IIS 5.0 server only (Win2000
- requires SP2). Click
here to download
When the Nimda worm arrives by email, the worm uses a MIME exploit
in MS Internet Explorer 5.0 allowing the virus to be executed
just by reading or previewing the file. Information and a patch
for this exploit can be found at this
location.
You don't need this patch if you use Netscape exclusively or IE
6.
If you're unable to download upgrades and patches right now
you will better off keeping your computer turned off until you
can update your system and antivirus software!
Update and Nimda virus removal instructions from Symantec for
Norton AntiVirus (NAV):
1. Run LiveUpdate to make sure that you have the most recent virus
definitions.
2. Start Norton AntiVirus (NAV), and make sure that NAV is configured
to scan all files.
3. Run a full system scan.
4. If any files are detected as infected by W32.Nimda.A@mm or
W32.Nimda.A@mm (html), click Repair.
5. If any files are detected as infected by W32.Nimda.A@mm (dr)
or W32.Nimda.A@mm (dll), click Delete.
6. Reboot the computer.
7. Repeat steps 1-6 above until no more files are detected as
W32.Nimda.A@mm.
8. Delete the following text from the Shell= entry in system.ini:
load.exe -dontrunold
9. Remove unnecessary shares.
10. Delete the guest account from the Administrators group (if
applicable)
text
You
can also download Norton AntiVirus (NAV) update from Saturn:
If your product is among:
NAV 2000 for Win9x/NT/2000
NAV 2001 Professional Edition
NAV 2001 for Win95b/98/NT/2000/Me
NAV 2002 for Win98/Me/NT/2000/XP Home/XP Pro
NAV 3.0 & 4.0 for DOS/Win3x
NAV 4.0 for NetWare
NAV 4.0, 5.0 and 2000 for Win9x
NAV 4.0, 5.0 and 2000 for WinNT
NAV 6.0 & 7.x Corporate Edition
NAV for Firewalls 1.0x
NAV for Gateways 2.x (WinNT/2000)
NAV for Internet Email Gateways 1.x (WinNT only)
NAV for Lotus Notes (Intel)
NAV for MS Exchange (Intel)
Norton NT Tools
Norton Utilities 2.0 for WinNT
pcAnywhere32 7.5 and higher for WinNT
You need this file. This all inclusive updater will update all
of the products listed above. Click
here to download.
