Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I recently received a message from NAV that I received the W32.Nimda.enc(9-2-02) and its unable to repair. NAV stated this when I went to my activity log:
Date 9/02/02, Time: 19:52:34, Guest on Jerry
the file
C:\Documents and Settings\all users\documents\my music\sample music\amazingmagiceveryday.eml
is infected by w32.nimda.enc
unable to repairI got this same popup 9 times and each ending had .eml, but a different file such as(ballonsculptures1, 87991424.eml)
I got this message after recieving a file transfer from family(ICQ).
I ran every fix tool(panda,Nav,mcafee)and it cannot be found. I also ran these tools disconnected from network and in safe mode. I disabled the sys Restore.
I have NAV 2002 and im running Zone Alarm.
I cant find any traces of this virus. I was told it is probably gone, but there is still a guest account on my windows and I never had that before.
Any suggs. And can I delete this guest account or can I manually check somewhere to see if its still on cpu
Sorry for a long post, but I am troubled by this. TIA

Jerry, no need to fear, all those virus scanners can't find it because ny default NAV deletes the virus file if it can' t repair it...I also run NAV and Zone Alarm on my XP. So:
#1-Don't worry about the virus, more likely than not it is gone.
#2-Delete the guest account if you never made the account and it suddenly appeared after the virus was found.
#3-Perform a full system scan with an emergency disk you can create with NAV. It boots to a dos promtp and you can run a system scan from there when the computer boots. If not use this removal tool from Symantec...
http://securityresponse.symantec.com/avcenter/venc/data/w32.nimda.e@mm.removal.tool.html#4-Set NAV to scan incoming e-mail attachments and outgoing e-mail attachments.
and...#5- TRASH OUTLOOK EXPRESS AND USE EUDORA!!!!!!!!!!!!!!
Sorry, but I absolutely hate Outlook...

Hi domenic
Thanks for your input.
LOL! on Outlook(I'm with you on that). I actually use netscape (dont know if thats any better), but I never tried anything else.
Thanks again for the much needed advice.

I just had this (censores self) thing myself, but luckily enough Symantec released a repair tool:
http://securityresponse.symantec.com/avcenter/venc/data/w32.nimda.e@mm.removal.tool.html
And it doesn't hurt to run this if the virus is gone, Symantec actually suggests to run it several times to make sure the virus is gone. Hopefully you will get some peace of mind. I agree, get rid of Outlook!

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |