|
VIRUS INFORMATION
09/18/2001 - Nimda, which is admin spelt backwards is a computer virus infects Microsoft
Windows 95, 98, NT and 2000 computers running Microsoft Outlook. The
virus is spread through e-mail and uses the content-type audio/x-wav
so it can be ran automatically without the infected e-mail being
open. Once a computer is infected the virus attempts to share
the C: drive and checks for the Code Red Virus. Next, the virus adds
JavaScript code to HTML documents that opens the file readme.EML. The
virus is then capable of spreading when this HTML document is open on
other computers.
SYMPTOMS
The system.ini file located in the
Windows directory will have the following line:
Shell=explorer.exe load.exe -dontrunold
When selecting and/or opening a e-mail
the Microsoft Windows Media Player may open automatically but give an
error. This likely indicates that the virus is attempting or has
infected your computer.
HOW TO CLEAN VIRUS
AND/OR PREVENT IT
Ensure that you have the latest update
for your virus protection program.
If you are using Microsoft Internet
Explorer 5.01 or greater ensure that you have the Incorrect MIME
header patch installed on your computer. This patch can be found by clicking
here.
|
