Computing.Net > Forums > Security and Virus > Nimda - rears its ugly head

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Nimda - rears its ugly head

Reply to Message Icon

Name: Jerry
Date: September 13, 2002 at 07:27:52 Pacific
OS: win xp(dell 8200) Home cp
CPU/Ram: 2.0 gig/256 ram
Comment:

I recently received a message from NAV that I received the W32.Nimda.enc(9-2-02) and its unable to repair. NAV stated this when I went to my activity log:

Date 9/02/02, Time: 19:52:34, Guest on Jerry
the file
C:\Documents and Settings\all users\documents\my music\sample music\amazingmagiceveryday.eml
is infected by w32.nimda.enc
unable to repair

I got this same popup 9 times and each ending had .eml, but a different file such as(ballonsculptures1, 87991424.eml)

I got this message after recieving a file transfer from family(ICQ).

I ran every fix tool(panda,Nav,mcafee)and it cannot be found. I also ran these tools disconnected from network and in safe mode. I disabled the sys Restore.

I have NAV 2002 and im running Zone Alarm.

I cant find any traces of this virus. I was told it is probably gone, but there is still a guest account on my windows and I never had that before.

Any suggs. And can I delete this guest account or can I manually check somewhere to see if its still on cpu

Sorry for a long post, but I am troubled by this. TIA




Sponsored Link
Ads by Google

Response Number 1
Name: domenic
Date: September 13, 2002 at 12:18:21 Pacific
Reply:

Jerry, no need to fear, all those virus scanners can't find it because ny default NAV deletes the virus file if it can' t repair it...I also run NAV and Zone Alarm on my XP. So:

#1-Don't worry about the virus, more likely than not it is gone.

#2-Delete the guest account if you never made the account and it suddenly appeared after the virus was found.

#3-Perform a full system scan with an emergency disk you can create with NAV. It boots to a dos promtp and you can run a system scan from there when the computer boots. If not use this removal tool from Symantec...
http://securityresponse.symantec.com/avcenter/venc/data/w32.nimda.e@mm.removal.tool.html

#4-Set NAV to scan incoming e-mail attachments and outgoing e-mail attachments.

and...#5- TRASH OUTLOOK EXPRESS AND USE EUDORA!!!!!!!!!!!!!!

Sorry, but I absolutely hate Outlook...


0

Response Number 2
Name: Jerry
Date: September 13, 2002 at 19:42:44 Pacific
Reply:

Hi domenic

Thanks for your input.

LOL! on Outlook(I'm with you on that). I actually use netscape (dont know if thats any better), but I never tried anything else.

Thanks again for the much needed advice.



0

Response Number 3
Name: Shmanda
Date: September 14, 2002 at 17:13:03 Pacific
Reply:

I just had this (censores self) thing myself, but luckily enough Symantec released a repair tool:

http://securityresponse.symantec.com/avcenter/venc/data/w32.nimda.e@mm.removal.tool.html

And it doesn't hurt to run this if the virus is gone, Symantec actually suggests to run it several times to make sure the virus is gone. Hopefully you will get some peace of mind. I agree, get rid of Outlook!


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Nimda - rears its ugly head

AVG update issue www.computing.net/answers/security/avg-update-issue/4814.html

Why cant I update my XP www.computing.net/answers/security/why-cant-i-update-my-xp-/11699.html

Trojan that wont go away! www.computing.net/answers/security/trojan-that-wont-go-away/18122.html