• Rise from your gwave!

Somebody help me!!!

Discussion in 'General Tech Help & CD Burning Help' started by slinga, Jan 25, 2002.

  1. slinga

    slinga Member

    Hey guys,

    I CAN'T GET RID OF THE GODDAM NIMDA VIRUS!! And I if I forget you can kiss my ftp good bye cuz I'm never going to re rip everything. I've been using this program by Symantec that finds the virus, deletes all the *.eml files, but then everything's back when I reboot. What should I do? Any advice...
  2. Anapan

    Anapan New Member

  3. ExCyber

    ExCyber Staff Member

    If you (or the tool) haven't, do the following:

    - Update Internet Explorer. One of the primary reasons this virus gets spread is due to a really, really, stupid error in IE.

    - If you're running it, update IIS.

    - Replace all copies of riched20.dll and mmc.exe with known good versions, preferably from your Windows install disc.

    - Open up c:windowssystem.ini and look at the "shell" variable. If it reads:

    Shell = explorer.exe load.exe -dontrunold

    then change it to:

    Shell = explorer.exe

    and delete c:windowssystemload.exe

    - Make sure you've got the right removal tool - according to Symantec, there are two common versions of W32.Nimda, for which seperate removal tools exist.
  4. IceDigger

    IceDigger Founder Staff Member

    get a decent virus scanner trial version. most importantly, scan all html files on your pc (there's a bunch, like manuals, windows pages, etc), as they contain it too and tend to re-infect you.

Share This Page