Nimda file blocker

To keep the files off your servers and desktops, use the following method.

This tip was submitted to the SearchWin2000.com tip exchange by member Chuck Elton. Please let other users know

how useful it is by rating it below.


Although there are millions (?) of Nimda files out there waiting to copy themselves to an open folder on your server or desktop, only one Nimda-infected file at a time will occupy any one folder. Antivirus software will delete the infected file each time it shows up, but this will fill up the log in no time.

To keep the files off your servers and desktops, use the following method.

  1. Create a blank .txt file and rename it to test.eml.
  2. Place that file in all shared folders (and delete any .eml or .nws files present).
  3. For folders that contain .doc files, create a blank .txt file and rename it riched20.dll (do not put in a directory that needs a working riched20 file).

The folder will remain free of any Nimda-infected .eml, .nws and/or riched20.dll files.

This was first published in April 2003

Dig deeper on Network intrusion detection and prevention and malware removal

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

SearchVirtualDesktop

SearchWindowsServer

SearchExchange

Close