Problem solve Get help with specific problems with your technologies, process and projects.

Removing a virus from an OS

What is the best way to remove the Nimda worm from a Novell server? I've got the latest patches for Microsoft 2000 servers and my workstations.
Removal of any virus should be the same on any OS, no matter the vendor. The following should be done:

1. Remove the device from the network or communication with other devices to ensure you have stopped the spread and infection of other systems.

2. Ensure your virus scanner/cleaner is current and correct. Correct meaning that it will work on your OS and the version of the virus.

3. Clean all aspects of the servers (RAM, Hard drive, floppies, backups... etc.) Otherwise, the virus will reappear.

4. Double check the cleaning effort with another virus product, if possible.

5. Have someone else look over your shoulder or inspect your work. Two eyes are always better than one. This does not question your work efforts, but ensures the correct steps have been accomplished.

6. Finally, after all has been said and done, ensure corrective measures have been taken to ensure the virus doesn't return through the same path or methods.

For more information on this topic, check out these other SearchSecurity.com resources:
Best Web Links: Malware
Best Web Links: Virus protection

This was last published in December 2001

Dig Deeper on Information security policies, procedures and guidelines

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.