VIRUS ALERT!!!

[CRH911S]

FYI, contacted the following virus off rennlist.com., W32Nimda@mm(html).

Clinton
1977 911S 2.7 Alaska

[cstreit]

How did you get it, and how is i fixed?

[ras911]

I think this is a ongoing problem with the Rennlist E mail Board. I got a couple of bad viruses there 2 months ago. Norton came to the rescue! Contained and quarantined.

[emcon5]

Originally posted by ras911:
I think this is a ongoing problem with the Rennlist E mail Board.

Now, let's put the blame where it belongs. You probably got viruses from board members, who's infected systems found your email address in their address book. The rennlist board itself shouldn't have infected you, is it doesn't forward attachments. The new infection-de-jour is Nimda, details on protection and removal can be found here:

http://www.mcafee.com/anti-virus/viruses/nimda/default.asp?cid=2444

The other big PITA is Sircam, from a few months ago. Details here:

http://www.mcafee.com/anti-virus/viruses/sircam/default.asp?cid=2444

As a general rule, get antivirus software, and keep it updated. Mcafee puts out new virus data files weekly. If you run a web server, make sure you keep the security patches current.

Most importantly, If you get an email attachment that you don't know what is, DON'T OPEN IT!. Even if you know who it is from.

And, if you can, run as little Microsoft software as possible. Most of the current horde of viruses take advantage of holes in Microsoft Products (mainly IIS and Outlook).

Tom



------------------
82 911SC Coupe

[98GTW]

FWIW this virus can also be picked up simply by visiting an infected server.
I got mine from a visit to the Orlando, FL Chamber of Commerce.
I verified it as the source and phoned them this morning.


------------------
Dave
'77 911S
inari77s@911fanatic.com
Rochester, NY

[rstoll]

Update your Norton today!

------------------
Robert Stoll
83 SC
83 944

[Wayne 962]

emcon, Unfortunately, you are mistaken. Due to a bug in Microsoft's Internet Explorer, it will run attachments unsecurely from a website, simply by looking at the webpage.

Unbelievable. That's like selling a car with a big hole in the brake lines. Microsoft is simply amazing.

-Wayne

For more information, see here: www.cert.org

[Ted Stringer]

USE NETSCAPE

------------------
Ted Stringer
nuke3@juno.com
'84 911 Targa aka pocketrocket

[jsmarcus]

I wish I had checked this thread before I went to the renn classifieds today....

------------------
Josh
Black on Black '84 Carrera

[Kurt B]

Is deleting the infected HTM files and any .eml files sufficient? I got it from one of my other favorite places (don't go here!)
www.secondsout.com

[adamnitti]

can mac users get it, too?

------------------
Adam Nitti
ajnitti@mindspring.com
www.adamnitti.com
'85 911 Carrera Coupe
'72 BMW 2002tii (new arrival)
'97 Grand Cherokee Limited
Peachstate PCA member

[emcon5]

Here are the details.

http://www.cert.org/advisories/CA-2001-26.html

[Saffs]

Adam,
Mac genrally suffer less. There's lots of PC viruses and not too many Mac ones by comparison. I don't think this one will affect Macs.

------------------
'75 911S Targa
'81 BMW Alpina C1 2.3

[Wayne 962]

Here's what Norton told me:

Scan type: Realtime Protection Scan
Event: Virus Found!
Virus name: W32.Nimda.A@mm(html)
File: C:\WINNT\Profiles\Administrator\Temporary Internet Files\Content.IE5\C5QV81YB\secondsout[1].htm
Location: C:\WINNT\Profiles\Administrator\Temporary Internet Files\Content.IE5\C5QV81YB
Computer: PORSCHE
User: Administrator
Action taken: Clean succeeded : Access allowed
Date found: Thu Sep 20 02:28:51 2001

All the Pelican Servers were updated with the latest versions of everything, and zero viruses were found today when I ran the check!

-Wayne