Re: [cobalt-users] worm attack

["MikeM" <MyRaQ@xxxxxxxxx>]

On 9/19/01 at 9:43 PM Marco Baurdoux wrote:

|
|If you installed all the services packs ( You know these 100 MB of patches
|for security bugs ), especially SP2 then you shouldn't have be infested by
|nimba, however if you didn't that you gentilly helped spreading around the
|virus.
|
|Just for info, so that everyone can have a laugh, the swiss Post, had their
|servers blocked by the virus :-))
|=======================================================================


We have probably only seen the beginning of the mess caused by this worm.  From the Symantec anti-virus site: 

"Also, the worm will create open network shares on the infected computer, allowing access to the system.  During this process the worm creates the guest account with Administrator privileges."

http://www.symantec.com/avcenter/venc/data/w32.nimda.a@xxxxxxx




A wide open guest account with administrator privileges.   That is not a good thing.