Ask the Expert

Removing a virus from an OS

What is the best way to remove the Nimda worm from a Novell server? I've got the latest patches for Microsoft 2000 servers and my workstations.

    Requires Free Membership to View

Removal of any virus should be the same on any OS, no matter the vendor. The following should be done:

1. Remove the device from the network or communication with other devices to ensure you have stopped the spread and infection of other systems.

2. Ensure your virus scanner/cleaner is current and correct. Correct meaning that it will work on your OS and the version of the virus.

3. Clean all aspects of the servers (RAM, Hard drive, floppies, backups... etc.) Otherwise, the virus will reappear.

4. Double check the cleaning effort with another virus product, if possible.

5. Have someone else look over your shoulder or inspect your work. Two eyes are always better than one. This does not question your work efforts, but ensures the correct steps have been accomplished.

6. Finally, after all has been said and done, ensure corrective measures have been taken to ensure the virus doesn't return through the same path or methods.


For more information on this topic, check out these other SearchSecurity.com resources:
Best Web Links: Malware
Best Web Links: Virus protection

This was first published in December 2001

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: