Hello,
I was attacked by NIMDA.
I applied the patch.
I installed Norton Antivirus.
C$, D$, ADMIN$ shares are deleted.
IIS 4.0 PC is now clean but…(I think..)
If someone is accessing a web page then Norton Antivirus on NT client PC reports that there “The file in C:\WINNT\PROFILES\ADMINISTRATOR\LOCAL SETTINGS\Temporary Internet Files\ContentIE.5\QRABUDNF\intranet.htm”
is infected by W32.NIMDA.A (repaired)
On a Win98 client I see a pop up window saying that the Page or Script can not be found on the Server.
I think my WWW tried to find this “readme.eml” but because it failed it responded with this message.
Do you have any idea how can I stop this problem. IS there any removal tool for NIMDA virus?
Do I have to reinstall everything… (format)?