Network Associates' Mcafee business unit has released a stand alone tool to
remove the nimda virus/worm. See this web page for more information:
 
http://vil.nai.com/vil/virusSummary.asp?virus_k=99209
 
Obviously, existing anti-virus software DATs have also been released.
 
Network Associates' Sniffer business unit has released Sniffer filters to assist
with identifying infected machines. There is even a way to set up an alert to
send an email once the worm's signature traffic is detected on a network.
See this web page for the filter and more information:
 
http://www.sniffer.com/other/jump/nimda-filter.asp
 
I am not authorized/~/able to answer software specific support questions--so please
do not contact me with those.  :-)  However, if I see a generic question posted to
this list about the worm that I can answer, I will do so...time permitting.
 
Thanks,
-BM
 
 -----Original Message-----
From: Eric Germann [mailto:ekgermann@cctec.com]
Sent: Thursday, September 20, 2001 7:53 AM
To: Indra PRAMANA; Andras Bellak
Cc: Steve Smith; nanog@nanog.org
Subject: RE: Trend Micro FIX_NIMDA.EXE - was Re: Virus fix

-----Original Message-----
From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of Indra PRAMANA
Sent: Wednesday, September 19, 2001 11:56 PM
To: Andras Bellak
Cc: Steve Smith; nanog@nanog.org
Subject: RE: Trend Micro FIX_NIMDA.EXE - was Re: Virus fix

Andras,

At 07:46 PM 9/19/01 -0700, Andras Bellak wrote:
Norton released a definition file yesterday that cleaned everything but the .eml files and made the systems resistant to re-infection. They released an update today that got the .eml files as well.

Yes, but this requires us to install the antivirus software as well. Do you know any tools like FIX_NIMDA.EXE that can fix the problem automatically without having to use the antivirus software?

I still haven't seen anything that cleans up the htm, html, asp, etc files, but there are a few utilities that work fine for doing that one.

What are the utilities? Where can I get them?
 
Norton Antivirus will clean most of the htm, html, asp, etc files.  http://www.symantec.com
 
Thank you for your help.

Cheers.