New Virus

[patrick]

Watch out for emails with readme.exe attachments

http://www.symantec.com/avcenter/venc/[email protected]

[pacodiablo]

heh, just what we need  

[Jpshostr]

I saw that too, sounds like something I don't want to have.

[patrick]

our entire email system here at work is shut down until a fix is out.

very aggravating.  can't get ANY work done

:0

[Guest Friz]

One of the guys at work got it at home. Said it killed his OS.

[LT]

I just down loaded the patch from microsoft. Thanks for the warning.:sneek: :sneek:

[Zane]

Thanks for the warning!  

I hate viruses(but that doesn't stop people from sending them to me) :angry:

[MountaineerTom]

It say to download for the version of IE that you have.  It shows the updates for IE 5.5 SP1 and IE 5.01 SP1.  I have IE 6.0.  I'm assuming I don't need this, is that true?

[Stepside Z]

I wonder if Norton will stop it?

[patrick]

norton should catch it if you have the latest version, but they posted removal instructions also:

 

 

1. Run LiveUpdate to make sure that you have the most recent virus definitions.

2. Locate the line that begins with Shell= in c:\windows\system.ini. Remove all text following Explorer.exe from this line. When finished the line should look like:

 

shell=Explorer.exe

 

Note: If Windows is installed in a different location, make the appropriate substitution. Also, some computers may have an entry other than Explorer.exe after shell=. If this is the case and you are running an alternative Windows shell, then change this line to shell=Explorer.exe for now. You can change it back to your preferred shell after you have finished this procedure.

 

3. If AutoProtect is not enabled, enable it before restarting the computer. For instruction on how to do this please read the document How to enable and disable NortonAntiVirus Auto-Protect.

4. Restart the computer.

5. Start Norton AntiVirus (NAV), and make sure that NAV is configured to scan all files. For instruction on how to do this, read the document How to configure Norton AntiVirus to scan all files.

6. Scan your system with NAV. For instruction on how to run a scan with NAV, please read the document: How to scan for viruses.

7. For each file detected as infected by W32.Nimda.A@mm or W32.Nimda.A@mm (html), choose Repair.

8. For each file detected as infected by W32.Nimda.A@mm (dr), W32.Nimda.enc, W32.Nimda.A@mm (dll), choose Delete.

9. Restore admin.dll and riched20.dll from backup or the Windows/Office .cab files if necessary.

10. Remove unnecessary shares.

11. Delete the guest account from the Administrators group (if applicable).