Nimda got me

[SEiZe]

I am running two Win2k servers (yeah i know, poor me) and I got that wonderful Nimda virus today on one of my servers around 4:00pm CST. It infected 1204 out of 53004 files in a 2 minute time period. Good thing that I turned IIS and my modem off quickly. Right now I am rescanning my PC and having it remove Nimda from those files.

I wish that people would stop sending viruses out. It gets really annoying sometimes. Lucky for me, I keep updating my virus scanners and use them all the time. Nimda like to make more files named .eml and place them all over your server's directories.

Moral of this story is patch your servers, don't run IIS (switch to Appache), and don't trust .NET

[cloasters]

After seeing part of the the log of an AV prog that tried to get Nimda out of a Win2K box, I wish you good luck. The guy that posted the log had no choice but to wipe his HDD. Chances are that you'll have to do the same. SBT.

While Linux and Apache are not impervious most, ahem, people that write viruses go for bang for their buck--in a manner of speaking. MS's "Enterprise" software(BBB has nerve, I'll give him that)shouts, nay screams to the world--"Please, wreck my day!"

Good luck adapting Linux to your serving needs. It's not all that difficult, and you'll become a tiny target. Rather than a four storey tall bullseye!

[SEiZe]

I took a while (8+ hours), but i finally got rid of Nimda. I scanned five machines last night and downloaded and installed too many patches. Nimda is gone off of my servers. whew

[cloasters]

Yaay! Glad to read that you vanquished the %&*@^&!

[SEiZe]

I just can't believe how fast it infects files. 1204 in one minute is alot, of course it was running on a PII 350 w/ 288MB PC100 RAM. Another thing, it was the new NimdaII virii which has copyrights included in the coding.

[SJAXKINGPIN]

Good Work Soldier. I've heard many people actually needing to wipe their drives to get rid of NIMBDAII. It's likely the still infected/yet undetected machines out there that haven't been given the 8hrs. of TLC you gave that keep these virii in the loop.

[SEiZe]

That was the first virii that I had even gotten on any of my machines. I squashed it now I am going to backup everything just in case it happens again. Next time I will just reload completely.

[286 Rocks]

My parents had nimda on their Duron 700 Win98 machine. I tried to fix it for a good hour or two. But every time I did a scan, It would come back saying its fixed 2000 or so files and my system was clean. Did a scan 1/2 hour later says Nimda has infected 4000 files. After that I said screw it threw their outlook folder on my computer and did a full format. I just have no patience for things like that.

[Pinky]

I got hit hard with the first one... machine worked one minute, refused to boot the next .

Reinstalling and zonealarm helped

Router helped more.

Then the motherboard died.

Reinstalling and zonealarm didn't stop that