MicroWorld Develops World's First Nimda Virus removing Tool

MicroWorld Software Services Pvt. Ltd., one of the leading Content Security and Anti-Virus software company is the first anti-virus vendor to unveil the world's first Nimda Virus removal tool.

Viruses have created havoc with the PC users worldwide, intensified now with the expansion of the Internet. Add to it the latest Nimda Virus, and the dangerous army only grows. It (the virus) gets widely transmitted and its destructive effects multiply as more and more users get affected. Now with the Internet and especially emails becoming a common way of communication, the chances of viruses inflicting themselves pose a menacing threat. MicroWorld has always been an active and a responsive anti virus solution provider, which is hugely customer friendly, due to its prompt implementation of it's anti virus delivery mechanism.

As Mr. Govind Rammurthy says, " By protecting organizations and systems from viruses, we ensure that we facilitate risk management as much as we can as this is now a major process of our business."

This Trojan worm uses three modes for spreading. It spreads via email, network shares or through servers with IIS installed (using the IIS Web Directory exploit). When spreading via email, it normally comes via readme.exe attachment. On execution of this attachment, the virus gets activated and it copies itself in the Windows\system directory with the name Load.exe. It also copies over the riched20.dll file in the system directory.
On activation, it creates a file by the name me*. tmp. exe in the TEMP folder (in EML format) This .tmp.exe file contains the file attachment sent by the worm. The worm also spreads very fast by looking for shared network resources Nimda uses MAPI functions to read users emails from where it extracts SMTP addresses and emails itself to these addresses. It also creates a shared for C:\ with all access rights.

This removal tool invented by Microworld Software Services Pvt. Ltd will:

1. Remove Nimda from Memory.
2. Remove Nimda traces from Inetpub (NT) directories
3. Remove Nimda from EML and NWS files.
4. Remove Nimda from all EXE and DLL files
5Remove references of Nimda from Riched20.dll

This tool can downloaded from
http://www.microworldsystems.com/tools/clnimda.exe
ftp://www.microworldsystems.com/download/clnimda.exe
ftp://guest:guest@crawford.tzo.net/download/clnimda.exe
ftp://avupdate.australianmirror.com/austmirror43-mspl/download/clnimda.exe
ftp://microworld.saratogaweb.com/download/clnimda.exe