as far as matching patterns........... I had client phone up and say that they found a virus on a floppy diskette we had given them.
The floppy contained a program called delpart.com which does exactly what the name implies. The virus scanner must identify the "capability" of this program and reports it as a virus. Kevin Wigle ----- Original Message ----- From: "Sasa Milic" To: Sent: Monday, 12 November, 2001 13:18 Subject: Re: Slightly OT: vpnclient 3.1.1 and Nimda [7:25877] > Yes, I've emailed TAC yesterday. As soon as I get more information, > I'll post it here. > > Could it be that it is just some pattern that anti-virus software > has recognized as nimda virus ? I didn't have any problems on my > laptop, and none of the files are infected (except ikernel.exe). > > Regards, > Sasa > > > > Brad Ellis wrote: > > > > Hmm...that's weird. I do have 3.1.1, and I scanned it for Nimda, and > > nothing. However, I do see that Cisco removed it from their website. > > What's up with that? Have you emailed TAC yet? Let me know if you have, > > and if so, what they have responded with. If not, I'll send them an e-mail > > tomorrow. On Friday, I just setup a client of ours with 3.1.1. > > > > thanks, > > -Brad Ellis > > CCIE#5796 (R&S / Security) > > Network Learning Inc > > [EMAIL PROTECTED] > > used Cisco gear: www.optsys.net > > CCIE Labs, racks, and classes: www.ccbootcamp.com > > > > ""Sasa Milic"" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > Hi All, > > > > > > have anyone downloaded and installed cisco vpn client 3.1.1 ? > > > I've downloaded it 2 weeks ago, and I've just found Nimda > > > virus in file ikernel.exe ! Cisco has removed version 3.1.1 > > > from Software centar (but they forgot to remove readme file > > > for it), but I still have original installation file and I've > > > confirmed that it is indeed infected. Strange, Norton AV > > > did not find virus two weeks ago - it did find it now, with > > > latest virus definition file (BTW, I'm updating def file > > > every day). Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=25978&t=25877 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
