Download and run this tool to remove infections of the W32.Nimda.A@mm (Nimda) virus. If you are running Windows Me, then disable System Restore. Please refer to the section System Restore option in Windows Me for additional details. If you are on a network or you have a full-time connection to the Internet, disconnect the computer from the network and the Internet. Because this worm spreads by using shared folders on networked computers, to ensure that the worm does not reinfect the computer after it has been removed, Symantec suggests sharing with read-only access or using password protection. Once a computer has been attacked by W32.Nimda.A@mm, it is very difficult to determine what security settings have been compromised.