October 9th, 2001, 12:59 AM
**** the Nimda
I got the W32/Nimda virus a little while ago and began deleting all the .eml files off of my machine in DOS (error deleting in Windows).
I then downloaded a Nimda remover from Symantic and ran that.
Still when I start up my computer something accesses my A: drive and something is running in MSDOS. I can figure out how to delete it, Symantic can't either.
Anyone have a solution without paying the virus makers (McAfee) money to fix it?
October 9th, 2001, 01:23 AM
Whenever you boot up a computer your CMOS access the floppy to see if there is a bootable disk. Most operating systems use autoexec.bat and the other startup files through msdos when it boots up
[gloworange]\"A hacker is someone who has a passion for technology, someone who is possessed by a desire to figure out how things work.\" [/gloworange]
October 9th, 2001, 03:06 AM
Turn off the boot-up floppy seek in windows:
Right-click on 'My Computer'
go to Properties
got to the last tab on the top of the screen that comes up
click the 'Advanced' button on the screen then make sure that boot-up floppy seek is turned off.
Or go to Start -> Run 'msconfig'
then select the Startup tab and see what programs run outside of the autoexec.bat file.
Already mentioned by casper3699 is to make sure you check your autoexec.bat file to make sure something isn't trying to access it. Your autoexec.bat file will also tell you everything that runs in DOS when your PC boots up.
Risk everything, or gain nothing.
October 9th, 2001, 03:50 AM
Sounds to me like there is a line in your autoexec file that references your A: drive (as mentioned by the above posts)
Check your PATH statement for "A:"
If that does not correct it, try looking at this article I wrote on my site (Pay close attention to Tip #6 about the StartUP places) ...hopefully that will help you
\"Your work is to discover your world and then with all your heart give yourself to it. \"
October 9th, 2001, 08:25 AM
or you could try posting a topic whose title is in a format other than "**** the ___"
I'm sure that would get your problem solved a lot faster :P
October 9th, 2001, 02:34 PM
I got hit with this virus and it is not pretty. Symanntec does offer a free virus scan online.
To fix my problem I made sure I had the most recent defs and then scanned the system. After initial scan rebooted. Ran the scan again. If clean, reboot and scan again untill you have two clean scans while rebooting after each scan.
I was able to get the Symantec removal tool to work for me as well. I had two machines that kept getting reinfected.
October 9th, 2001, 07:00 PM
Thanks everyone. I ended up taking out the program "msoldapp" out of my win.ini file using sysedit. Now my computer is back to normal. Im assuming this program had something to do with the virus.
**** the **** the format.