Thanks, Irregular. I just read the update from Sans on this one. Here's some help for you Windows users:
"******Section III******
Information on Cleansing from Symantek(sic):
http://www.symantec.com/avcenter/venc/data/w32.nimda.a@mm.html
Removal instructions:
1. Run LiveUpdate to make sure that you have the most recent virus definitions.
2. Start Norton AntiVirus (NAV), and make sure that NAV is configured to scan all files. For instruction on how to do this, read the document How to configure Norton AntiVirus to scan all files.
3. Run a full system scan.
4. If any files are detected as infected by W32.Nimda.A@mm or W32.Nimda.A@mm (html), click Repair.
5. If any files are detected as infected by W32.Nimda.A@mm (dr) or W32.Nimda.A@mm (dll), click Delete.
6. Reboot the computer.
7. Repeat steps 1-6 above until no more files are detected as W32.Nimda.A@mm.
8. Delete the following text from the Shell= entry in system.ini: load.exe -dontrunold
9. Remove unnecessary shares.
10. Delete the guest account from the Administrators group (if applicable)
*****Section IV*****
Info from SANS-
A new worm that has been named "Nimda" is propagating with unprecedented speed across the Internet. The worm appears to have at least four distinct propagation mechanisms, and infects hosts running any version of Windows. The network activity caused by the worm has resulted in an effective denial of service attack at many sites."
Irregular got the lastest, that it affects all Windows users. Be careful whose site you browse!
Hank
