[42742] in North American Network Operators' Group
RE: Trend Micro FIX_NIMDA.EXE - was Re: Virus fix
daemon@ATHENA.MIT.EDU (Eric Germann)
Thu Sep 20 07:54:35 2001
Reply-To: <ekgermann@cctec.com>
From: "Eric Germann" <ekgermann@cctec.com>
To: "Indra PRAMANA" <indra@webvisions.com>,
"Andras Bellak" <Andras.Bellak@wfinet.com>
Cc: "Steve Smith" <ssmith@freeliant.com>, <nanog@nanog.org>
Date: Thu, 20 Sep 2001 07:52:51 -0400
Message-ID: <NDBBJJPLIGJGLBKILFIHKEFMEAAA.ekgermann@cctec.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_005D_01C141A9.3FDCD4C0"
In-Reply-To: <5.1.0.14.2.20010920115425.02b28bd0@sg.asianfrontiers.com>
Errors-To: owner-nanog-outgoing@merit.edu
This is a multi-part message in MIME format.
------=_NextPart_000_005D_01C141A9.3FDCD4C0
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_005E_01C141A9.3FE475E0"
------=_NextPart_001_005E_01C141A9.3FE475E0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
-----Original Message-----
From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of
Indra PRAMANA
Sent: Wednesday, September 19, 2001 11:56 PM
To: Andras Bellak
Cc: Steve Smith; nanog@nanog.org
Subject: RE: Trend Micro FIX_NIMDA.EXE - was Re: Virus fix
Andras,
At 07:46 PM 9/19/01 -0700, Andras Bellak wrote:
Norton released a definition file yesterday that cleaned everything but
the .eml files and made the systems resistant to re-infection. They released
an update today that got the .eml files as well.
Yes, but this requires us to install the antivirus software as well. Do
you know any tools like FIX_NIMDA.EXE that can fix the problem automatically
without having to use the antivirus software?
I still haven't seen anything that cleans up the htm, html, asp, etc
files, but there are a few utilities that work fine for doing that one.
What are the utilities? Where can I get them?
Norton Antivirus will clean most of the htm, html, asp, etc files.
http://www.symantec.com
Thank you for your help.
Cheers.
------=_NextPart_001_005E_01C141A9.3FE475E0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 5.50.4807.2300" name=3DGENERATOR></HEAD>
<BODY>
<BLOCKQUOTE=20
style=3D"PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px =
solid">
<DIV class=3DOutlookMessageHeader dir=3Dltr align=3Dleft><FONT =
face=3DTahoma=20
size=3D2>-----Original Message-----<BR><B>From:</B> =
owner-nanog@merit.edu=20
[mailto:owner-nanog@merit.edu]<B>On Behalf Of </B>Indra=20
PRAMANA<BR><B>Sent:</B> Wednesday, September 19, 2001 11:56 =
PM<BR><B>To:</B>=20
Andras Bellak<BR><B>Cc:</B> Steve Smith; =
nanog@nanog.org<BR><B>Subject:</B>=20
RE: Trend Micro FIX_NIMDA.EXE - was Re: Virus=20
fix<BR><BR></FONT></DIV>Andras,<BR><BR>At 07:46 PM 9/19/01 -0700, =
Andras=20
Bellak wrote:<BR>
<BLOCKQUOTE class=3Dcite cite type=3D"cite"><FONT face=3Darial =
color=3D#0000ff=20
size=3D2>Norton released a definition file yesterday that cleaned =
everything=20
but the .eml files and made the systems resistant to re-infection. =
They=20
released an update today that got the .eml files as well.=20
</FONT></BLOCKQUOTE><BR>Yes, but this requires us to install the =
antivirus=20
software as well. Do you know any tools like FIX_NIMDA.EXE that can =
fix the=20
problem automatically without having to use the antivirus =
software?<BR><BR>
<BLOCKQUOTE class=3Dcite cite type=3D"cite"><FONT face=3Darial =
color=3D#0000ff=20
size=3D2>I still haven't seen anything that cleans up the htm, html, =
asp, etc=20
files, but there are a few utilities that work fine for doing that=20
one.</FONT></BLOCKQUOTE>
<DIV><BR>What are the utilities? Where can I get them?<BR><SPAN=20
class=3D320075211-20092001><FONT face=3DArial color=3D#0000ff=20
size=3D2> </FONT></SPAN></DIV>
<DIV><SPAN class=3D320075211-20092001><FONT face=3DArial =
color=3D#0000ff=20
size=3D2>Norton Antivirus will clean most of the htm, html, asp, etc=20
files. http://www.symantec.com</FONT></SPAN></DIV>
<DIV><SPAN class=3D320075211-20092001> </SPAN><BR>Thank you for =
your=20
help.<BR><BR>Cheers. </DIV></BLOCKQUOTE></BODY></HTML>
------=_NextPart_001_005E_01C141A9.3FE475E0--
------=_NextPart_000_005D_01C141A9.3FDCD4C0
Content-Type: text/x-vcard;
name="Eric Germann.vcf"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
filename="Eric Germann.vcf"
BEGIN:VCARD
VERSION:2.1
N:Germann;Eric
FN:Eric Germann
ORG:CCTec
TEL;WORK;VOICE:(419) 968-2640
TEL;WORK;FAX:(603) 825-5893
ADR;WORK:;;17780 Middle Point Road;Van Wert;OH;45891;United States of =
America
LABEL;WORK;ENCODING=3DQUOTED-PRINTABLE:17780 Middle Point =
Road=3D0D=3D0AVan Wert, OH 45891=3D0D=3D0AUnited States of Americ=3D
a
URL:
URL:http://www.cctec.com
EMAIL;PREF;INTERNET:ekgermann@cctec.com
REV:20010529T013421Z
END:VCARD
------=_NextPart_000_005D_01C141A9.3FDCD4C0--
