.EML VIRUS!!!!!!?????!!!!!!!

[stingrae]

All the systems in our college LAN are infected by this..it has created .eml(outlook express msg) files in every folder on the hdd and even in Network Neighbourhood!!...its replicating on its own..i think it started with a msg with an attachment called "Readme.exe"...
PLEEEEEEZE HELP!!!..how the heck DO i remove it (other than formatting)?..i've been challenged by muh faculty u c!!!

THanx in advance..

 

[JustinSampson]

Sounds like nimda.

 

[chrisjor]

I believe that would be the Nimda virus, that is a pain in the butt, but I do not think it is actually destructive unless you let it get out of hand. Hopefully someone with more expertise will respond to you soon.

 

[chrisjor]

get rid of outlook!! it is nothing but a virus incubator!!!

 

[chrisjor]

oops

 

[SuperSix]

Hmmm....

Try www.antivirus.com?

Or www.symantec.com?

 

[udonoogen]

ooh geez ... sux to be you

 

[Rakkis]

Quick info:

The virus most likely got into your network from an email attachment. Once executed, it does the following:
- goes to outlook and sends itself to ppl in your addressbook (i think it attaches itself to a random document file when it does this)
- copies itself to every unprotected (i.e. no password required) network share your computer can see

You can remove it, but it's a bit of a pain. After the standard run through an updated antivirus program, you have to make sure certain files (autoexec.bat, win.ini, etc) don't reference infected files anymore. You'll probably have to replace a few dll's for windows and office and of course delete the attachment and email it rode on. This of course all has to be done AFTER you close all your network shares so that you do not get reinfected from the network.

Symantec had a detailed check list on how to go about all this. And you can also download a virus-specific removal tool from them.

 

[yakko]

<< get rid of outlook!! it is nothing but a virus incubator!!! >>

Really? I have never got a virus from mine.