[iwar] [fc:Computers.Hit.Around.Globe.by.New.Form.of.Old.Virus]

From: Fred Cohen (fc@all.net)
Date: 2001-11-04 20:44:46


Return-Path: <sentto-279987-3773-1004935456-fc=all.net@returns.groups.yahoo.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 [204.181.12.215] by localhost with POP3 (fetchmail-5.7.4) for fc@localhost (single-drop); Sun, 04 Nov 2001 20:46:07 -0800 (PST)
Received: (qmail 2858 invoked by uid 510); 5 Nov 2001 04:43:21 -0000
Received: from n5.groups.yahoo.com (216.115.96.55) by 204.181.12.215 with SMTP; 5 Nov 2001 04:43:21 -0000
X-eGroups-Return: sentto-279987-3773-1004935456-fc=all.net@returns.groups.yahoo.com
Received: from [10.1.1.222] by n5.groups.yahoo.com with NNFMP; 05 Nov 2001 04:44:16 -0000
X-Sender: fc@red.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-8_0_0_1); 5 Nov 2001 04:44:15 -0000
Received: (qmail 82865 invoked from network); 5 Nov 2001 04:44:15 -0000
Received: from unknown (216.115.97.172) by m4.grp.snv.yahoo.com with QMQP; 5 Nov 2001 04:44:15 -0000
Received: from unknown (HELO red.all.net) (65.0.156.78) by mta2.grp.snv.yahoo.com with SMTP; 5 Nov 2001 04:44:15 -0000
Received: (from fc@localhost) by red.all.net (8.11.2/8.11.2) id fA54ikE02574 for iwar@onelist.com; Sun, 4 Nov 2001 20:44:46 -0800
Message-Id: <200111050444.fA54ikE02574@red.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL3]
From: Fred Cohen <fc@all.net>
X-Yahoo-Profile: fcallnet
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Sun, 4 Nov 2001 20:44:46 -0800 (PST)
Reply-To: iwar@yahoogroups.com
Subject: [iwar] [fc:Computers.Hit.Around.Globe.by.New.Form.of.Old.Virus]
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Computers Hit Around Globe by New Form of Old Virus

By John Schwartz, The New York Times, 11/2/2001
<a href="http://dailynews.yahoo.com/h/nyt/20011101/tc/computers_hit_around_globe_by_new_form_of_old_virus_1.html">http://dailynews.yahoo.com/h/nyt/20011101/tc/computers_hit_around_globe_by_new_form_of_old_virus_1.html>

A new version of a malicious computer program known as Nimda is making
its way through the world's computer networks, computer security experts
said.

A new version of a malicious computer program known as Nimda is making
its way through the world's computer networks, computer security experts
said yesterday.

Nimda.E, the latest version of the computer worm, has been detected on
computer networks since Monday. The first version, Nimda.A, was spotted
on the Internet on Sept. 18.

The New York Times experienced an interruption of Internet service on
Tuesday and part of Wednesday that has been attributed to Nimda, said
Catherine J. Mathis, a spokeswoman for the company. "All of our
operations have returned to normal," she said. 
The program is spread primarily through e-mail messages; when a machine
on a network is infected, the program searches out and infects servers,
the computers that run applications, and causes those machines to flood
their own networks with packets of data. That, in turn, slows system
performance greatly.

The program, which takes advantage of vulnerabilities in Microsoft's
operating system and server software, can also lay infected systems open
to computer intruders. 
Microsoft published software patches in September that users could
download from the Internet to protect their systems from Nimda. Security
experts estimate that Nimda.A infected as many as two million machines
before users took measures to protect their computers. Security
companies said that because of that earlier effort, the threat from the
newly circulating version was not great.

"If you're not already infected and if you have applied the patches,
you're O.K.," said Craig Schmugar, a virus researcher at Network
Associates, a computer security company based in Santa Clara, Calif. He
added, however, that a single infected machine could cause significant
disruption throughout a network of computers. 
Representatives of the Computer Emergency Response Team, a
federally-funded computer security organization at Carnegie Mellon
University, said yesterday that they had not seen a significant surge in
Nimda.E since it was first detected.

------------------------ Yahoo! Groups Sponsor ---------------------~-->
Cobra Gas Powered Scooter. Top speed exceeds 25 mph.
Originally $599.95.
Now $399.95 at Youcansave.com.
http://us.click.yahoo.com/K11sED/OkNDAA/ySSFAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-12-31 20:59:58 PST