Home Page Owners Registry Discussion Forums ProwlerMall Event Scrapbooks About

Click here to return to the Prowler Online Board Main Page
Thread Closed  Topic Closed
  ProwlerOnline, Plymouth/Chrysler Prowler Discussion Forum
  General Prowler Discussion
  A word about the Nimda Virus (worm)...

Post New Topic  
edit profile | register | preferences | faq | search

   Bottom of Page next newest topic | next oldest topic
Author Topic:   A word about the Nimda Virus (worm)...
Mike Krehel





POA Site Supporter
The World's Quickest Prowler (11.65 sec) and Administrating Kat
Personal ScrapBook

From:United States
Registered: Jul 2000
Admin Use

posted 09-21-2001 06:38 AM     Click Here to See the Profile for Mike Krehel     send a private message to Mike Krehel   Edit/Delete Message   Reply w/Quote   Search for more posts by Mike Krehel
There is a new virus or worm that is affecting the internet in the past few days called Nimda. This virus is spread primarily by email, and ties up, or creates excessive traffic on the internt. It is spread in several ways, one is through visiting some websites, the other is through e-mail.

Rest asurred that ProwlerOnline is a very safe site because it resides on a Linux server and maintains a high level of security! Do be cautious about visiting websites that are unknown or are not on top of things! PCs using Windows NT or Windows 2000, along with Windows NT running IIS 4 and IIS 5 servers are most vulnerable. Infected computers may continue to flood the Internet and most networks with worm generated messages (even without you being aware of it).


The e-mail portion of the virus arrives with the attachment readme.exe. Upon execution it drops the file, mepxxxx.tmp in the c:\windows\temp directory. The file is an eml format email. This temp file contains the file attachment sent by the worm emails. The typical name for this file attachment is readme.exe but there have been reports of file attachments with the extensions .wav and .com.

This is a non destructive virus who's only mission is to create massive amounts of data to cause traffic jams on the internet, so please be patient if you see delays in webpage loading!

More information can be found at the Symantec Web Site , or the Mcafee Website .

Just trying to keep everyone updated,
Mike Krehel
ProwlerOnline.com


------------------
Mike Krehel
ProwlerOnline.com Click and see me go! Watch me light em up!

jd2ksilver


POA Site Supporter
Prowler Junkie
Personal ScrapBook

From:Mt. View, CA
Registered: Jul 2000
Admin Use

posted 09-21-2001 06:58 AM     Click Here to See the Profile for jd2ksilver     send a private message to jd2ksilver   Edit/Delete Message   Reply w/Quote   Search for more posts by jd2ksilver

------------------
See me WAX a Roush
See me WAX a Cobra


CAR & DRIVER of The Month

cnote6





POA Site Supporter
Prowler Junkie
Personal ScrapBook

From:Dallas, TX
Registered: Nov 2000
Admin Use

posted 09-21-2001 09:31 AM     Click Here to See the Profile for cnote6     send a private message to cnote6   Edit/Delete Message   Reply w/Quote   Search for more posts by cnote6

------------------
TGF Spoiler, Hardtop,Front Grill, Doorpanels
Real Rod Exhaust << Very cool & Mopar Exhaust
2000 Black Bumpers & Chrome Shimmers on bumpers around radio & vents
Carlini Trans Cover,Chrome headrest, Brake Lines, Bumper Cover Kit
Chromed Front & Rear of Kat & Front End Protectors from Real Rod.
Prowler performance intake 2.1
Chrome 2000 Shifter, Purple Neon underneath, High Polished dash rings and billet logo door handles
Dunlop SP 9000's & 6 cool CD's in the changer

butchcee


POA Site Supporter
Prowler Junkie

From:Lake Ariel, Pa.
Registered: Sep 2000
Admin Use

posted 09-21-2001 09:57 AM     Click Here to See the Profile for butchcee     send a private message to butchcee   Edit/Delete Message   Reply w/Quote   Search for more posts by butchcee
Thanks Mike. My server sent me the same message. Glad I'm still using Netscape as it said Explorer was more susceptible to the attack.

------------------

Yellow is DCOOLEST

HiHoSilver

Prowler Junkie

From:U.S. of A.
Registered: Aug 2000
Admin Use

posted 09-21-2001 01:02 PM     Click Here to See the Profile for HiHoSilver     send a private message to HiHoSilver   Edit/Delete Message   Reply w/Quote   Search for more posts by HiHoSilver
nimda, admin spelled backwards is far from non-destructive. Yes, it adds tons of files to directories and ties up network traffic but, it also replaces any number of files which any time one of them is called upon starts the process all over again.
If your server is infected, your best course of action is to rebuild the server from scratch although I have seen one case where that didn't even work.

Trey

------------------
Trey
Post 2001 Black-Tie #005
(your welcome Larry)False alarm, it's gone now.

Mods: 2001 Speed Yellow Porsche Cabriolet

Mike Krehel





POA Site Supporter
The World's Quickest Prowler (11.65 sec) and Administrating Kat
Personal ScrapBook

From:United States
Registered: Jul 2000
Admin Use

posted 09-21-2001 01:13 PM     Click Here to See the Profile for Mike Krehel     send a private message to Mike Krehel   Edit/Delete Message   Reply w/Quote   Search for more posts by Mike Krehel
Trey,

The point I was trying to make is that it's basically non destructive to an average users computer.

------------------
Mike Krehel
ProwlerOnline.com Click and see me go! Watch me light em up!

STARFLAME
Prowler Junkie

From:Greensboro,N.C.,USA
Registered: Oct 2000
Admin Use

posted 09-21-2001 02:13 PM     Click Here to See the Profile for STARFLAME     send a private message to STARFLAME   Edit/Delete Message   Reply w/Quote   Search for more posts by STARFLAME
Thanks Mike K.
WAY KOOOOOOL!!!
STARFLAME
Richard Jackson




POA Site Supporter
Prowler Junkie

From:Fairfield, Ohio
Registered: Jul 2000
Admin Use

posted 09-21-2001 03:34 PM     Click Here to See the Profile for Richard Jackson     send a private message to Richard Jackson   Edit/Delete Message   Reply w/Quote   Search for more posts by Richard Jackson
If you get it, got it, go here.
http://WWW.ANTIVIRUS.COM/

Richard

------------------
OhioSilverCat

VT Prowler
Prowler Junkie

From:Annandale, VA
Registered: Jul 2000
Admin Use

posted 09-21-2001 11:09 PM     Click Here to See the Profile for VT Prowler     send a private message to VT Prowler   Edit/Delete Message   Reply w/Quote   Search for more posts by VT Prowler
As someone who has been fighting this virus since 9/18 I would say you can't take it lightly. I run a small consulting shop in DC with many servers and clients. I haven't been to bed before 3am all this week.

Eventhough Mike has performed updates on his server, their are other web admins who might not have done this yet, these other server can infect clients visiting their sites. The best protection for people running Microsoft operating systems is to read the following URL by Microsoft. It will direct you to all the updates needed to protect your personal computer, or Microsoft server.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/topics /Nimda.asp

I have been fighting viruses for many years and I'd say this is by far the hardest virus to get rid of. The delivery options it has are many. I forgot to apply one update and one server was hit and it spread it to all others on my network, and some clients that connect to my servers.

Trey, eventhough Symantec says the only 100% way to get rid of the virus is to rebuild, with hard drive re-format, a good server admin should be able to get rid of the virus with help from Microsoft and Symantec.

It is unfortunate that in todays computer world all, end users and server admins, have to be very aware of virus protection.

The only thing worse than viruses are spam.

I'm not chicken little, just helps to have a good umbrella sometimes.

Hope all computer are running well. Glad Mike is on top if it.


------------------
Jeff
Black 2K
------
Carlini Transmission Cooler Cover
Mopar mud flaps (front/back)
Chrome Shimmers
Mac Motorsports Intake
Much more on the way....

This message has been edited by VT Prowler on 09-22-2001 at 08:21 AM

Ken Carter
Prowler Junkie

From:Naples, Fl., USA
Registered: Apr 2001
Admin Use

posted 09-22-2001 08:47 AM     Click Here to See the Profile for Ken Carter     send a private message to Ken Carter   Edit/Delete Message   Reply w/Quote   Search for more posts by Ken Carter
Mike
Thanks for the warning. I do have another question. For some reason my PC is not remembering my password when logged on. It shows the 6 stars in the password box, but if I don't reenter it each time, it will not take my post, and I must retype the entire message. Any ideas?
Also, we are hoping you are going to "Cruisin the Coast" and bring your HOT ROD CAT for the drag races. I really want to see that "mean mother".
Ken

All times are CT (US)  Top of Page  Previous Page

 Return to General Prowler Discussion  next newest topic | next oldest topic



Administrative Options: Open Topic |Make Sticky | Archive/Move | Delete Topic
Post New Topic  
Hop to:

Contact Us | Prowler Online Homepage

All material contained herein, Copyright 2000 - 2012 ProwlerOnline.com
E-Innovations, LP

POA Terms of Service