How to disinfect computer from the virus I-Worm.Nimda?

How to disinfect computer from the virus I-Worm.Nimda?

In this section you will find recommendations how to fight malicious programs which cannot be disinfected by Kaspersky Lab's products. In order to disinfect/remove malicious programs you may have to modify the system registry or use an additional utility. If you failed to find the necessary information or you find these recommendations too complicated or inadequate, please send a request to the Technical Support service via the [You must be registered and logged in to see this link.].

How to disinfect computer from the virus I-Worm.Nimda?
ID Article: 40	Other languages: [You must be registered and logged in to see this link.]	130	2010 Apr 04 00:26	[You must be registered and logged in to see this link.]

If your computer has been infected by the network worm I-Worm.Nimda, to disinfect the computer, do the following:

Update the antivirus databases

Download the utility [You must be registered and logged in to see this link.] to fight the virus I-Worm.Nimda.
This program will restore the file system.ini altered by the worm and will delete the files of the virus

Reboot your PC

Check by the Search function whether your computer has the following files: MMC.EXE, RICHED20.DLL, LOAD.EXE RICHED20.DLL (this is the Windows system library), MMC.EXE (Microsoft Management Console). If the antivirus scanner detects a virus in these files, the files should be deleted and changed for a “clean” files from another computer with the same OS or from Windows distributive pack (these files cannot be disinfected as the virus completely rewrites it)

Run the antivirus scanner. When an infected exe- file is detected enable “Perform recommended action”

To intrude the system from infected emails I-Worm.Nimda uses the breach in the Internet Explorer security system that allows automatically fulfill an attached executable file.

Check the Internet Explorer version installed on your computer.
- If the version is 5.00 and below install a newer version.
- If the version is 5.01 or 5.5 install a special patch from Microsoft. You can download the patch in the link: [You must be registered and logged in to see this link.].
- If the version is 6.0 do not change anything

How to disinfect computer from the virus I-Worm.Nimda?

How to disinfect computer from the virus I-Worm.Nimda?

How to disinfect computer from the virus I-Worm.Nimda? :: Comments