Nimda file blocker

To keep the files off your servers and desktops, use the following method.

This tip was submitted to the SearchWin2000.com tip exchange by member Chuck Elton. Please let other users know how useful it is by rating it below.


Although there are millions (?) of Nimda files out there waiting to copy themselves to an open folder on your server or desktop, only one Nimda-infected file at a time will occupy any one folder. Antivirus software will delete the infected file each time it shows up, but this will fill up the log in no time.

To keep the files off your servers and desktops, use the following method.

  1. Create a blank .txt file and rename it to test.eml.
  2. Place that file in all shared folders (and delete any .eml or .nws files present).
  3. For folders that contain .doc files, create a blank .txt file and rename it riched20.dll (do not put in a directory that needs a working riched20 file).

The folder will remain free of any Nimda-infected .eml, .nws and/or riched20.dll files.

This was last published in April 2003

Dig Deeper on Network intrusion detection and prevention and malware removal

PRO+

Content

Find more PRO+ content and other member only offers, here.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.

-ADS BY GOOGLE

SearchVirtualDesktop

SearchWindowsServer

SearchExchange

Close