Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations IamaSherpa on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

nimda

Status
Not open for further replies.

snuffy166

MIS
Oct 9, 2001
2
CA
I have the nimda virus on my exchange 5.5 server, I have downloaded the fix but still it is there. How do I get rid of it??
 
Go to one of the websites and folow the instructions for manual removal.
Follow the chain in the FAQ. Ed Fair
efair@atlnet.com

Any advice I give is my best judgement based on my interpretation of the facts you supply.

Help increase my knowledge by providing some feedback, good or bad, on any advice I have given.

 
I had nimda.

It was nasty to remove.

I recommend getting a really up to date anti-virus software I like Mcafee, because it does not leave little files all over hard drives.

Anyway, Nimda leaves Microsoft outlook files which it created and gave names like files it found on your system. McAfee should find them all. Nimda will also replace riched20.dll with an infected copy, and nimda will put files in your Temp Directory.

I reccommend deleting your temp directory from the dos prompt after doing a dos boot of your computer. Then install antivirus software and have it find all copies of NIMDA I had 1,1753 on on my drives. Just delete em. Then deal with the modified dll. you most likely will have to delete it and reinstall your operationg system.
 
I ran the downloadable tool from symantec but I had to run it twice before the virus was completely gone.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top