had nimda on nt 4 workstation still problem

[agoodjohn]

had nimda on nt 4 workstation cleaned with kaspersky avp pro but it still comes up with c:$ shared as hidden drive when its asked not to. still had problem with clients sharing word and excell files of this machine. Even after clean it had riched20.dll in all shared folders deleting that has stoped the clients word excell probs but still getting this shared drive problem.
regards Alan G

 

[Brooks]

The C$ share is going to be automatically shared whenever the machine is restarted. This is a design of Windows NT. The $ indicates that this is a hidden share that is not normally seen when browsing the network.

To permantly disable this, try this link:

http://www.winguides.com/registry/display.php/4/

 

[RCSTechnology]

I don't wish to be a pain , but rather then shut down your hidden shares (you might need them someday), go to this link: http://www.sophos.com/support/faqs/nimda.html. This has a disinfector and instructions on how to clean your system. Make sure that you unplug from LAN until you are sure that you are clean, and make sure that you secure your system (see instructions) from NIMDA (and CodeRed & CodeBlue) before putting yourself back into the LAN. Take a real good look at the local users and groups and kill any guest or unknown accounts that all of the sudden have admin access or have become members of the admin groups (this includes group access).

NIMDA is a PITA and you have to really make sur you have your system cleaned, secured and patched <I>(as well as anybody else that attaches to you)</i>, otherwise it just keeps showing up.

Also, just to beat the dead horse some more , make sure you keep the ol' virus software installed and up-to-date.

Good luck!!