Anil
Mitra - author | Resume | Horizons Enterprises™ | Toolkit | Home | Site-Map | Useful Links | Email the Author | Email for Information
New as of September 2001: A
Philosophy of Mind Site
9/22/2001
NIMDA VIRUS
May start with a *.eml [readme.eml], generates *.exe files [mmc…], writes *.eml [readme] to C:\ and sub-folders, generates numerous tfpt files, writes a line of html to numerous *.htm *.html files.
DATE DETECTED
9.19.01
DELETING
Combinations of search and delete:
Files modified before a certain date
Contains text and/or named *.eml, readme.eml, *.htm *.html, tfpt, *.exe
THEN EDIT AND CHECK
All the affected *.htm/l files