Security

Ask something
Discussion Locked

Bit by nimda ... still

0 helpful
3 replies

by frank k 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I thought I had it licked but now it's back. My server has been patched as required to block nimda. My Office 97 people are having trouble with file "open" and "save as". I've run various "fix" nimda programs from symantec and pc cillin. I'm runninga 30 day eval of trend micro's server protect. Server checks out fine. I've upgraded the pcs to 98 second edition. I've upgraded IE to SP2 of 5.5 which also addresses outlook express. I've uninstalled and reinstalled word and excel and the riched20.dll. Most of my day I delete bogus .eml and .nws files from the server. I've also tried manual uninstallation and I'm still having problems. Points will be awarded after I'm up and running cleanly for a week.

3 replies

by cdeclercq

Try this NIMDA Scanner for your network:
http://www.eeye.com/html/Research/Tools/nimda.html

Disconnect all machines from the system. Run the Symantec Nimda removal tool. fixnimd.com from a WRITE PROTECTED floppy on each system. If clean bring back onto the network. You have to find the cause of the infection, there is still a machine somewhere that is infected. Disconnected from the network stops the infected machine from spreading the virus. SO therefore you should have all machines on the network cleaned first. This will help you find your infected machine.

This discussion is closed to new replies.