(Here is some info. on preventing an infection and also how to repair an infected system.)
CNET | CatchUp.com Dispatch
Protect Against Nimda Virus
September 21, 2001
Special Alert
Protect Your System from Nimda Virus Infection
A new worm virus, W32.Nimda.A@mm, also known as Nimda, is spreading rapidly via e-mail. It infects PCs running Microsoft Internet Explorer 5.01 and 5.5, and servers running Microsoft IIS 4.0 and 5.0. Opening an e-mail with a hidden attachment can cause infection, and has the potential to cause problems with files stored on the hard drive. Infected systems can open additional security holes, slow down networks, and cause bandwidth problems as the virus tries to spread itself.
Run CatchUp Security Fixes now:
http://two.digital.cnet.com/cgi-bin2/fl ... 0Eq0dHu0AF
CatchUp Security Fixes can determine if you're vulnerable to Nimda. If the following vulnerabilities are detected by CatchUp, you may be susceptible to infection:
For clients:
Internet Explorer 5.5 Certificate Spoofing VulnerabilityInternet Explorer 5 Certificate Spoofing Vulnerability
Read Microsoft Security Bulletin MS01-027:
http://two.digital.cnet.com/cgi-bin2/fl ... 0Eq0eXH0Al
For servers:
IIS5 Web Server File Request Parsing Vulnerability
IIS4 File Permission Canonicalization Vulnerability
Read Microsoft Security Bulletin MS00-057:
http://two.digital.cnet.com/cgi-bin2/fl ... 0Eq0eXI0Am
Disinfect your System from Nimda
If you think your system may already be infected by the Nimda virus, download the Norton Nimda Removal Tool, which will scan your system for the virus. Also, make sure to update your virus definitions so that your current antivirus software can detect and protect against Nimda.
Download the Nimda Removal Tool:
http://two.digital.cnet.com/cgi-bin2/fl ... 0Eq0eXJ0An
Download virus definition updates:
http://two.digital.cnet.com/cgi-bin2/fl ... 0Eq0eXK0Ao