Virus?

[Charlie_Iliff]

Terry:
I had exactly the same experience. My computer at home is dual operating system, with W2000 on one drive that I use and W98 on my wife's. Both of us connect with AOL and a phone modem. She got the Nimda virus with no download or attachment to an e-mail. Norton trapped it and the repair tool found no problem. If someone hacked it, they sure don't have any sense about how to spend time. There's nothing to find there except constructive criticism of public officials.

 

[billboe]

Do you have a web server (specifically IIS) running on your system? Nimda can also come in that way.... Also, if you have any unprotected network shares on your PC, Nimda also takes advantage of those! Nimda is a pretty nasty one in terms of propagation. It could have been much meaner in terms of destruction...

Aren't viruses fun!

 

[TerryinMD]

Billlboe,

No, didn't install IIS.

Now, unprotected shared files. Now that is a distinct possibility. I have a hub with both machines connected to share files and our multifunction printer. What is an unprotected network share? A shared folder without using a password?

Terry

 

[beenthere]

IIS? Does that refer to an internet information server? And is it, for example, Netscape or is it something else? When I go to the the site that has the MS security bulletin to see if I need to add a patch, I get lost and confused real easily.
The Symantec bulletin that I referred to for cleaning up Nimda virus, said to run it over and over until the system is reported to be clean (which I did). Then it says:
<font color=blue>If necessary, download the appropriate MS patches to patch vulnerable systems.</font color=blue> How do I determine if it is necessary? Any help would be appreciated.
I am still trying to get beyond the 'extract' command to get the Riched20.dll file corrected. I am waiting for NAV to answer their 800 #, which was what Gateway Technical Service said I had to do. They said they couldn't help me remedy the problem I have (getting an error message that the d:\Win98\Win98_28.cab file could not be found).

 

[billboe]

<font color=blue>What is an unprotected network share? A shared folder without using a password?</font color=blue>

Yes, that is exactly what it is... The virus will copy itself to the unprotected shared folder and then someone/something must execute the virus in order for it to really infect this new PC (otherwise it can just sit there "dormant". When I say "something", I mean if the virus had access to the root folder ("c:\") then it could overwrite files that causes itself to be executed automatically... This is theoretical on my part... I know it will copy itself to unprotected shares, but, I'm not sure if it is smart enough to recognize that it has access to the other PCs root folder!!??

Anyway, that was a long winded answer to a simple question !

 

[billboe]

Beenthere,

Yes, IIS does stand for MS Internet Information Server... No other web servers (to my knowledge) are suseptible to Nimda.

Sorry I can't help with specifics! I dealt with Nimda about 2 (or more???) months ago... And, it wasn't exactly foolproof back then. A couple of systems that I worked on never recovered totally and had to be re-installed (now, that should say something about my virus fighting capabilities right there! /w3tcompact/icons/grin.gif )