Rich20.dll files left behind by Nimda

Does the Riched20.dll(56KB) file that is created by the Nimda virus and placed in all the folders that contain the word docs need to be deleted? I thought that if one opened a Word doc in one of those folders, it would then activate the worm again, through this dll. I found over 800 instances of this dll created on the shared network drive at work, yet the antivirus programs do not delete them.

Requires Free Membership to View

Login

By submitting you agree to receive email communications from
TechTarget and its partners. Privacy Policy Terms of Use.

The Rich20.dll file contains the library code for the Microsoft Rich controls used by the Nimda virus. Current RichXX file names are associated with the following versions:
Version 1.0 = Riched32.dll
Version 2.0 = Riched20.dll
Version 3.0 = Riched20.dll

The following list describes which versions of Rich Edit are included in which releases Microsoft? Windows?:
Windows XP = Includes Rich Edit 3.0 with a Rich Edit 1.0 emulator.
Windows Me = Includes Rich Edit 1.0 and 3.0.
Windows 2000 = Includes Rich Edit 3.0 with a Rich Edit 1.0 emulator.
Windows NT 4.0 = Includes Rich Edit 1.0 and 2.0.
Windows 98 = Includes Rich Edit 1.0 and 2.0.
Windows 95 = Includes only Rich Edit 1.0. However, Riched20.dll is compatible with Windows 95 and may be installed by an application that requires it.

Antivirus software will not delete or remove files unless they contain malicious code, thus the Rich20.dll files will not be removed. If the virus is still present in the directory, then YES the virus will start all over. IF the virus has been cleaned from RAM (system memory) and the hard drive/files are clean, NO the Rich20.dll file will do no damage.

Of course, proper administrative duties would include the removal of the Rich20.dll files since the antivirus program will not delete them.

More News and Tutorials

Articles

Related glossary terms

Terms for Whatis.com - the technology online dictionary

This was first published in October 2001

Join the conversationComment

Share

Comments

Results

Contribute to the conversation

All fields are required. Comments will appear at the bottom of the article.

Back to top

More from Related TechTarget Sites

Cloud Security
Consumerization
Financial Security
SMB Security
Security AU
Security IN
Computer Weekly

Cloud Security
- For cloud backup and disaster recovery, bandwidth proves problematic
  
  When it comes to cloud backup and disaster recovery, organizations are holding back due to insufficient bandwidth and lengthy recovery times.
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
- How to use PCI SSC supplement to achieve PCI compliance in the cloud
  
  Ed Moyle examines highlights of the recently released PCI SSC information supplement that offers new details on achieving PCI compliance in the cloud.
Consumerization
- What's new with the BB10 OS, BES 10 and more
  
  If you're wondering what all of BlackBerry's new products do, such as the BB10 OS, Hub, Balance and BES 10, this FAQ should clear things up.
- How limited mobile device support can help IT handle consumerization
  
  To deal with consumerization, some companies limit mobile device support to specific devices because it makes management and app development easier.
- BlackBerry, VMware deliver dual persona features for mobile devices
  
  BlackBerry's Secure Work Space for iOS and Android will help heavily regulated companies or those searching for extra security to better support BYOD.
searchFinancialSecurity
- PayPal CISO: Laws must foster better cybersecurity information sharing
  
  PayPal's Michael Barrett says many firms fear misuse of shared cybersecurity data. He also discusses the evolution of PCI DSS and mobile payment security.
- Cybergang plans to use Trojan against U.S. banks
  
  A cybergang in Eastern Europe revealed plans to attack U.S. banks with a Gozi-like Trojan, according to RSA.
- Improved Shylock Trojan targets banking users
  
  The latest variant of the banking Trojan is causing numerous problems, Symantec said.
searchMidmarketSecurity
- Windows Phone 7 security: Assessing WP7 security features
  
  Windows Phone 7 security features are proving to be a mixed bag. Sam Cattle assesses the enterprise security pros and cons of the latest Windows mobile platform.
- Choosing the best security certifications for your career
  
  Whether starting your career or planning your next step as an IT security professional, this tip will guide you toward the best certifications for your interests and experience.
- Midmarket security tutorials
  
  SearchMidmarketSecurity.com’s tutorials offer IT professionals in-depth lessons and technical advice on the hottest topics in the midmarket IT security industry. Through our tutorials we seek to provide site members with the foundational knowledge needed to deal with the increasingly challenging job of keeping their organizations secure.
searchSecurityAU
- Exploit kits evolved: How to defend against the latest attack toolkits
  
  Expert Nick Lewis details how automated exploit kits are evolving and offers mitigations for the latest methods employed by these attack toolkits.
- May 2013 Patch Tuesday fixes IE8 zero day; Adobe tightens ColdFusion
  
  The software giant's May 2013 Patch Tuesday update permanently fixes the IE8 zero-day flaw found in the Dept. of Labor website attack.
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
Information Security
- BYOD: Securing the risk to access the cost benefits
  
  Bring-your-own-device schemes offer businesses the opportunity to cut the costs and improve user experiences, but benefits can be dwarfed by the risks.
- A CIO's five-point plan for managing endpoint security
  
  Niel Nickolaisen offers a five-point solution for managing endpoint security for the hyper-connected enterprise -- starting with data governance.
- Microsoft offers 'fix' for latest Internet Explorer zero day
  
  Microsoft released a temporary fix to mitigate attacks using the most recent Internet Explorer 8 zero day vulnerability.
Computer Weekly
- Pearson integrates Google Enterprise and Office 365
  
  Publisher Pearson – which owns the Financial Times – uses cloud-based collaboration using Google and Microsoft products
- What's on an enterprise's checklist when seeking a datacentre provider?
  
  Is it energy efficiency? Is low cost or low latency the deal maker? Top enterprises disclose their checklists for datacentre providers
- How will Indian IT services firms evolve and prosper?
  
  Indian IT services firms need to reshape their businesses to continue growing as traditional markets and service offerings reach maturity

All Rights Reserved,Copyright 2000 - 2013, TechTarget