• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Nimda just won't go away

Viper0329

Platinum Member
I can't get rid of nimda. I cleaned the 3 comps on my network with NAV 2002, and the removal tool from symantec, but FLTrack says it keeps comin back when I open word. Is there anyway to get rid of it?
 


<< I can't get rid of nimda. I cleaned the 3 comps on my network with NAV 2002, and the removal tool from symantec, but FLTrack says it keeps comin back when I open word. Is there anyway to get rid of it? >>


YOu got to run the removal tool like 3 times. Run it; reboot; run again; reboot; run again...
Repeat until it comes up completely clean.

After that, if you've got boxes running unpatched IIS installations, they'll keep coming back. Also, one machine infected will continue to infect all unpatched machines in the network.
 


<< Quick question about this: Can it affect regular W2K machines, or does it just affect servers? >>

It can infect any winbloze machine I believe. I had nimda once. Regular 2K machine. It was a bitch.
 


<< Quick question about this: Can it affect regular W2K machines, or does it just affect servers? >>



It'll hit W2k workstation so long as IIS is still installed and running on the workstation I believe. Most standard installs of W2k include IIS as part of the base load.
 
Format, reinstall, patch (before it touches the net!) restore from good backups

It should be able to affect all Win2k machines.
 


<<

<< Quick question about this: Can it affect regular W2K machines, or does it just affect servers? >>



It'll hit W2k workstation so long as IIS is still installed and running on the workstation I believe. Most standard installs of W2k include IIS as part of the base load.
>>


Yep
Any machine with IIS installed is at risk, and even 2k Pro(Workstation) has it by default.
 


<< Ok, so will a standard (like InnoculateIt) AV catch it, or does it take something else? >>



Most AntiViruses catch it, but if you catch a self propogating virus like Nimda you deserve a reformat while you learn to patch.
 
Back
Top