Re: Nimda checker - now available

From: Russ (Russ.Cooper@RC.ON.CA)
Date: 09/24/01 

Message-ID:  <E9A01F52DC939448BBDE44ED2E1C468F1F1675@muskie.rc.on.ca>
Date:         Mon, 24 Sep 2001 17:37:17 -0400
From: Russ <Russ.Cooper@RC.ON.CA>
Subject:      Re: Nimda checker - now available
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

-----BEGIN PGP SIGNED MESSAGE-----

The XML file for checking for the presence of Nimda using HFNetChk is
now tested. It has successfully discovered Nimda on all machines
which were infected. It has not falsely detected Nimda on any
machines.

It will *not*, however, discover Nimda files on machines which have
not been infected. It will also not detect any variant of Nimda (none
known so far), something which AntiVirus products **do very well**.

http://www.ntbugtraq.com/nimdachk.asp

will take you to the page to download the latest version of HFNetchk,
plus provide you with the details to run it against the TruSecure.XML
file that contains the Nimda checking.

If your web access has been restricted and want to run this code
locally, drop me an email and I will send you a zip containing all of
the components (hfnetchk.zip, trusecure.xml, and the instruction
page)

Cheers,
Russ - Surgeon General of TruSecure Corporation/NTBugtraq Editor

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.2

iQCVAwUBO6+njRBh2Kw/l7p5AQEjTgP/YocDHRIbdSQzhZ14HfO6f2iYLRx9IPWW
xmaWOLOiwofnlIRdJsKNZdoZ5N1AXYw9mWMJm2zlS9Zflomjny/aavbz7DzKl5/+
K5zT0phBp/SB59nFJmIibe8oiulcNaXrBAAdhE5xjBOxiLxSVna7HCn/48i9y5rg
Ex9QyUEzeHY=
=UIc7
-----END PGP SIGNATURE-----

============================================================================
Delivery co-sponsored by Trend Micro, Inc.
============================================================================
TREND MICRO SCANMAIL FOR EXCHANGE 2000 -- SECOND to NONE

If you are worried about email viruses, you need Trend Micro ScanMail for
Exchange. ScanMail is the first antivirus solution that seamlessly
integrates with the Microsoft Exchange 2000 virus-scanning API 2.0. ScanMail
ensures 100% inbound and outbound email virus scanning and provides remote
software management. Download a FREE 30-day trial copy of ScanMail and find
out why it is the best:
http://www.antivirus.com/banners/tracking.asp?si=8&BI;=240&UL;=/smex2000
============================================================================