Nimda file blocker

To keep the files off your servers and desktops, use the following method.

This tip was submitted to the tip exchange by member Chuck Elton. Please let other users know...

how useful it is by rating it below.

Although there are millions (?) of Nimda files out there waiting to copy themselves to an open folder on your server or desktop, only one Nimda-infected file at a time will occupy any one folder. Antivirus software will delete the infected file each time it shows up, but this will fill up the log in no time.

To keep the files off your servers and desktops, use the following method.

  1. Create a blank .txt file and rename it to test.eml.
  2. Place that file in all shared folders (and delete any .eml or .nws files present).
  3. For folders that contain .doc files, create a blank .txt file and rename it riched20.dll (do not put in a directory that needs a working riched20 file).

The folder will remain free of any Nimda-infected .eml, .nws and/or riched20.dll files.

This was first published in April 2003

Dig Deeper on Network intrusion detection and prevention and malware removal



Find more PRO+ content and other member only offers, here.



Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:



  • VDI assessment guide

    Wait! Don't implement VDI technology until you know your goals and needs. A VDI assessment should consider the benefits of a VDI ...

  • Guide to calculating ROI from VDI

    Calculating ROI from VDI requires a solid VDI cost analysis. Consider ROI calculation models, storage costs and more to determine...

  • Keep the cost of VDI storage under control

    Layering, persona management tools and flash arrays help keep virtual desktop users happy and VDI storage costs down.