|
Dernière réponse | |
---|---|
Sujet : Plantage Outlook: manque de memoire, fermez des applications: HELP !! | |
dday | Ton probleme s'appelle NIMDA (peut etre). On a eu ce virus au boulot et toute les machine infectee avait d'un seul coup un probleme memoire a l'ouverture des mail sous outlook. Regarde dans WINDOWS\TEMP si tu a des EXE bizarre (je ne sais plus le nom et dans WINDOWS\SYSTEM si tu a LOAD.EXE c'est que tu es infecte.
Solution sur ANTIVIRUS.COM (il y a un patch qui te vire cette merde) -------------------------------------------------- ---------- ************************************************** ************************* FIX_NIMDA (version 1.00) Trend Micro, Inc. http://www.antivirus.com *************************************************************************** I. Description This tool is designed to clean a system that was infected by PE_NIMDA.A. This tool will clean the system without having to boot using the boot disk or emergency rescue disk. When FIX_NIMDA.EXE is executed, it will perform the following steps: o Terminate PE_NIMDA.A in memory. o Remove traces of PE_NIMDA.A in SYSTEM.INI file. o Scan all files on all fixed drives for infected executable and EML files. o Clean all infected files and delete all non-cleanable files. o Scan/clean all HTM/HTML/ASP files for PE_NIMDA.A by executing SLIDE.EXE. II. Requirements This tool is designed to run under Windows NT/2K and Windows 9X/ME. For this tool to execute properly under Windows NT/2000 it needs the following DLL files: o PSAPI.DLL Be sure that these two files are present in the "Winnt\system32" directory. III. How to use Once you have determined that your system is infected by PE_NIMDA.A, disconnect your computer from your network to prevent further infection, and run FIX_NIMDA.EXE from a clean disk. SLIDE.EXE and SLIDE.DAT should be present in the same directory as FIX_NIMDA.EXE. IV. Notes 1. There are instances where the original mother file gets infected with PE_NIMDA.A thereby detection would be PE_NIMDA.A. The file gets cleaned and another scan of the file reveals that it is the non-cleanable original mother file which FIX_NIMDA.EXE will delete. ---------------------------------------------- Bye |
Vue Rapide de la discussion |
---|