Re: NIMDA Horror

["Lucy E. Lynch" <llynch at darkwing.uoregon.edu>]

Brian -

I belong to a handful of security related mailing lists (including
sans & cert, ioz-security & unisog - a university oriented list
hosted by sans) - but far and a way the earlist warning/most useful
information comes from the nanog list (www.nanog.org for details)

As Rob points out, education is key here, so prehaps someone
there with a good connection could volunteer to read a couple
of these lists and repost to a local one in a timely way -

both unisog and nanog carry way more traffic than is useful to
a busy operator - but you need those tasty bits ASAP.

FYI - ioz-security makes some attempt to do this, but I haven't
seen any posts there since the codered outbreak...

Lucy E. Lynch 				Academic User Services
Computing Center			University of Oregon
llynch at darkwing.uoregon.edu		(541) 346-1774
Cell: (541) 912-7998			5419127998 at mobile.att.net

On Fri, 21 Sep 2001, Brian Longwe wrote:

> This thing has hit quite badly here in Kenya.
>
> Over the past three-four days many organisations' I.T. operations have been brought to a standstill in order to deal with the infection.
>
> One of our Kenyan mobile operators has shut down all operational TCP/IP connections (Internet + internal) for over two days in order to contain and eliminate the virus.
>
> I believe that many $$$ have been lost in time, data loss/corruption etc...
>
> On this note, does any country in Africa have a CSIRT (Computer Security Incident Response Team) that looks at IP/Internet security issues at a national level?
>
> Thx,
>
> Brian
>
>
>
> On Fri, 21 Sep 2001 09:23:56 -0700
> Agbenya Adotey <gagbey at ghana.com> wrote:
>
> > Hi folks,
> > Please could someone out there show me how to restore the following NT
> > files that were attacked by the Nimda virus? The files are
> > msimn,rundll32.exe,shell32.dll,control_rundll.
> >
> > Thanks for the support in advance.
> >
> > Regards,
> > Agbenya Adotey
> >
>
> -----
> This is the afnog mailing list, managed by Majordomo 1.94.4
>
> To send a message to this list, e-mail afnog at afnog.org
> To send a request to majordomo, e-mail majordomo at afnog.org and put
> your request in the body of the message (i.e use "help" for help)
>
> This list is maintained by owner-afnog at afnog.org
>


-----
This is the afnog mailing list, managed by Majordomo 1.94.4

To send a message to this list, e-mail afnog at afnog.org
To send a request to majordomo, e-mail majordomo at afnog.org and put
your request in the body of the message (i.e use "help" for help)

This list is maintained by owner-afnog at afnog.org