|
|
 |
Viruses and solutions |
|
In this section you will find recommendations how to fight malicious programs which cannot be disinfected by Kaspersky Lab’s products. In order to disinfect/remove malicious programs you may have to modify the system registry or use an additional utility. If you failed to find the necessary information or you find these recommendations too complicated or inadequate, please send a request to the Technical Support service via the HelpDesk form.
|
How to disinfect computer from the virus I-Worm.Nimda?
|
|
ID Article: 40
|
Other languages:
    
|  42 |
 2009 Apr 23 14:08 |
 Printable version |
If your computer has been infected by the network worm I-Worm.Nimda, to disinfect the computer, do the following:
- Update the antivirus databases
- Check by the Search function whether your computer has the following files: MMC.EXE, RICHED20.DLL, LOAD.EXE RICHED20.DLL (this is the Windows system library), MMC.EXE (Microsoft Management Console). If the antivirus scanner detects a virus in these files, the files should be deleted and changed for a “clean” files from another computer with the same OS or from Windows distributive pack (these files cannot be disinfected as the virus completely rewrites it)
- Run the antivirus scanner. When an infected exe- file is detected enable “Perform recommended action”
- To intrude the system from infected emails I-Worm.Nimda uses the breach in the Internet Explorer security system that allows automatically fulfill an attached executable file.
- Check the Internet Explorer version installed on your computer.
|
|
|
|
