Nimda virus

[Luciano U. Werner]

Thanx, Ric.

[RavenRay]

I hate this dayam virus.  Dayam, making my job 10x's longer to kill it and to patch up the server.

[Chris Edwards]

i checked the logs, and we've been getting hit by nimda... not that hard though... and it's not affecting performance much... and we're on UNIX

[Luciano U. Werner]

As I confessed general ignorant in PC technology, I have a question (or two questions):<br><br>1) Somebody said it was "auto-executable" when you recieved the fargin beast (or I understood that). How do I avoid contamination?<br><br>2) I've been hit for more then a week now (3 or 4x) buy a virus (or at least I think it is a virus) on some e-mails with an attached file and this text: "Hi! How are you? I send you this file in order to have your advice See you later. Thanks". The subject changes, but it's always this text. NAV doesn't recognize it as such (no warnings came up) and I have the last defenition list available. Could it be related?<br>

[Matt Keys]

yes, that email you are getting is definatly a virus, I recieved the same thing, but never opened it.

[Paul]

yeah the nimda is only autoexec in mail progs isnt it? i dont think it'll work in IE, it needs something like outlook because they download the mail dont they.<br><br>someone correct me, i have no idea what i'm talking about.

[Luciano U. Werner]

As a rule of thumb, if I don't know the sender, I delete the mail (with or witout warning from NAV). I would never execute it. But what about the Nimda? How can I avoid that if it auto-executes?<br><br>And Matt, the senders of those e-mails are unkown to me (never herad of them). Could it be related to PM in some way? If I'm not mistaken, these raids started when I logged on to PM.

[Moose or Chuck]

That "Hi! How Are You?" is the Code Red worm. If infected it sends itself to everyone in your address book and clogs up networks, takes down webpages, only trivial stuff really.

[Luciano U. Werner]

Well, if this little motherfarger is auto-executable too, I'm farged.<br>Is it?<br>And how in heavens do I avoid being infected?

[TBone]

Change Outlook so that it doesn't automatically run active scripts (move it to the restricted security area, or manually alter the settings). That should do the trick.

[Matt Keys]

the other day I disabled active scripts in outlook, but it also disabled them in explorer, and I had to re enable them to get things looking right.

[Luciano U. Werner]

Thomas, how do I do that? I went to Options and didn't find anything about active scripts.

[TBone]

Go to Tools->Options->Security. Change your zone settings to Restricted. That should disable active scripting. If you want to double check that it has, click Zone Settings and then customize the security yourself within the Restricted Zone.

[Luciano U. Werner]

Thanks, man, just did.<br>BTW, isn't leer with only one "e" as ler?

[TBone]

Not en español. Crazy irregular Spanish verbs, then you've got to go crazy with adding y's and j's for other tenses to keep the written language orthographically correct. I love the language, but I could do without the conjugations of leer, creer, and oir. And the subjunctive can kiss my ass, to be honest.