dcsimg


DevX Home    Today's Headlines   Articles Archive   Tip Bank   Forums   

Results 1 to 3 of 3

Thread: Nimda virus

  1. #1
    martin rydman Guest

    Nimda virus


    Hi all!
    I've never been in this newsgroup before (I hang out in the VB newsgroups),
    so please smack my fingers if I'm abusing this group.
    Anyway, I just wonder about the Nimda virus. I've been to my anti-virus suppliers
    homepage (Symantec), but couldn't find any info of this. It seems that the
    Nimda virus attacks my computer as soon as I've got a connection to the Internet-
    I don't have to download anything, visit special sites or open mail. Just
    by having a connection open, my anti-virus software catches maybe a hundred
    Admin.dll's a day. It quratines them immediately, so no harm is being done
    (at least not to my knowledge - gulp!), but is this a behaviour you recognize?
    Or is my system somehow infected so the darn bugs out there sniffs me up
    (or whatever - I know precious little about viruses...). I've run the scan
    and it reports a clean machine.

    Any hints much aprreciated!

    /Martin

  2. #2
    Chris Biltcliffe Guest

    Re: Nimda virus

    Hey....sorry nobody got back to you on this. I've only just joined this newsgroup a
    couple of days ago. The Nimda virus attacks in one of two ways:
    1) Through e-mail attachments.
    2) Through Windows networking.

    Since you're not opening e-mails, by the sounds of it, it sounds like it's getting
    through your network. If you don't have anything that you need Windows networking
    for (ie..a home network that you use filesharing with) you should disable it. This
    goes for anyone, whether you're concerned about viruses or not.
    Start->Settings->Control Panel->Network

    If NetBEUI is in there, highlight it, and click remove. You don't need Client for
    Microsoft Networks, either, unless you're actually running a MS network....which most
    home users aren't.

    If you do have some need for these networking protocols, get yourself a hardware
    firewall, if you're on cable/DSL....if you're on dial-up, I'd recommend running an
    old 486 as a Linux firewall, but that's beyond the capabilities of most people, so go
    with a software one instead.



    martin rydman wrote:

    > Hi all!
    > I've never been in this newsgroup before (I hang out in the VB newsgroups),
    > so please smack my fingers if I'm abusing this group.
    > Anyway, I just wonder about the Nimda virus. I've been to my anti-virus suppliers
    > homepage (Symantec), but couldn't find any info of this. It seems that the
    > Nimda virus attacks my computer as soon as I've got a connection to the Internet-
    > I don't have to download anything, visit special sites or open mail. Just
    > by having a connection open, my anti-virus software catches maybe a hundred
    > Admin.dll's a day. It quratines them immediately, so no harm is being done
    > (at least not to my knowledge - gulp!), but is this a behaviour you recognize?
    > Or is my system somehow infected so the darn bugs out there sniffs me up
    > (or whatever - I know precious little about viruses...). I've run the scan
    > and it reports a clean machine.
    >
    > Any hints much aprreciated!
    >
    > /Martin



  3. #3
    Arvind Shyamsundar Guest

    Re: Nimda virus


    Hello,
    As far as Nimda is concerned, start with this link

    http://www.mcafee.com/anti-virus/vir...t.asp?cid=2444

    My impression is that Martin is running an unpatched IIS, and that is the
    primary reason for the admin.dlls... no amount of antivir will prevent the
    admin.dll from being created - you need to patch the IIS first!!! The link
    above in turn points to the necessary hotfix links on the MS sites... patch
    quickly !!

    HTH,
    Arvind Shyamsundar
    Brainbench MVP for Internet Security.


    Chris Biltcliffe <cbiltcliffe@robarts.ca> wrote:
    >Hey....sorry nobody got back to you on this. I've only just joined this

    newsgroup a
    >couple of days ago. The Nimda virus attacks in one of two ways:
    >1) Through e-mail attachments.
    >2) Through Windows networking.
    >
    >Since you're not opening e-mails, by the sounds of it, it sounds like it's

    getting
    >through your network. If you don't have anything that you need Windows

    networking
    >for (ie..a home network that you use filesharing with) you should disable

    it. This
    >goes for anyone, whether you're concerned about viruses or not.
    >Start->Settings->Control Panel->Network
    >
    >If NetBEUI is in there, highlight it, and click remove. You don't need

    Client for
    >Microsoft Networks, either, unless you're actually running a MS network....which

    most
    >home users aren't.
    >
    >If you do have some need for these networking protocols, get yourself a

    hardware
    >firewall, if you're on cable/DSL....if you're on dial-up, I'd recommend

    running an
    >old 486 as a Linux firewall, but that's beyond the capabilities of most

    people, so go
    >with a software one instead.
    >
    >
    >
    >martin rydman wrote:
    >
    >> Hi all!
    >> I've never been in this newsgroup before (I hang out in the VB newsgroups),
    >> so please smack my fingers if I'm abusing this group.
    >> Anyway, I just wonder about the Nimda virus. I've been to my anti-virus

    suppliers
    >> homepage (Symantec), but couldn't find any info of this. It seems that

    the
    >> Nimda virus attacks my computer as soon as I've got a connection to the

    Internet-
    >> I don't have to download anything, visit special sites or open mail. Just
    >> by having a connection open, my anti-virus software catches maybe a hundred
    >> Admin.dll's a day. It quratines them immediately, so no harm is being

    done
    >> (at least not to my knowledge - gulp!), but is this a behaviour you recognize?
    >> Or is my system somehow infected so the darn bugs out there sniffs me

    up
    >> (or whatever - I know precious little about viruses...). I've run the

    scan
    >> and it reports a clean machine.
    >>
    >> Any hints much aprreciated!
    >>
    >> /Martin

    >



Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
HTML5 Development Center
 
 
FAQ
Latest Articles
Java
.NET
XML
Database
Enterprise
Questions? Contact us.
C++
Web Development
Wireless
Latest Tips
Open Source


   Development Centers

   -- Android Development Center
   -- Cloud Development Project Center
   -- HTML5 Development Center
   -- Windows Mobile Development Center