I'm using windows 2000 sever. A message dialog "W32.Nimda.E@mm (dr)virus in c:\inetpub\scripts\TFTP1948" always suddenly pop up on the screen while I was working with the computer. The message also said the file was unable to be repaired and sometimes also said that access to that file is not available. It doesn't only occur to TFTP1948, but also some other TFTP*. I have scanned the computer with Norton, but it can't find any virus. I have downloaded the virus cleaner trying to clear the virus(no matter W32.Nimda.E@mm or W32.Nimda.A@mm), but the cleaner cannot find the virus. Why do I have such virus? I keep scanning the computer once a week with Norton. How come it cannot detect the virus??? How can I solve the problem? A vistor called dan told me that the virus may screw up the system so mush that I need to reinstall the os. Is the virus still growing? Is it disastrous? Should I reinstall it now? Will there be some other solutions, because I don't want to reinstall the os? Please help me. Thank you

there are 1 million viruses that norton or any scanner wont scan. the only way to get rid of them is by hand. i saw this on symatic.com 1. Run LiveUpdate to make sure that you have the most recent virus definitions. 2. Start Norton AntiVirus (NAV), and make sure that NAV is configured to scan all files. For instructions on how to do this, read the document How to configure Norton AntiVirus to scan all files. 3. Run a full system scan. 4. If any files are detected as infected by W32.Nimda.C@mm, click Repair. If the files cannot be repaired, delete the file, and if necessary, replace it with a clean backup co the best way to get rid of it is, boot into safe mode. then go to start, run, msconfig and uncheck everything. then, boot into normal mode. and check scanregw.exe in msconfig, and any other ones that say keyboard in them. then press apply and reboot again.

Reeve, What you need is a specific tool to remove the virus... you said that is was the Nimda E. go to:http://securityresponse.symantec.com/avcenter/venc/data/w32.nimda.e@mm.removal.tool.html here you can download the removal tool for Nimda E or go to: http://securityresponse.symantec.com/avcenter/venc/data/w32.nimda.a@mm.removal.tool.html for the Nimda A removal tool. Tank863.

June 16, 2002 I had a new update of Norton Virus install, but I still have three file that I can't repair or delete. This a backdor auto upder viris. Thank you for your help

I have this exact same virus I have several TFTP scripts running in my processes and they wont close and norton will not help. im at a lost what to do.. please help! it wont let me delete them by hand or anything. How did the inetpub folder and viruses get on my pc? i think it was a microsoft product i d/l.. please help

I have exactly the same problem, I have d/l the extra program from nortan and it detects it and says it repairs the file but give it a couple of hours and its back again, I been trying heaps of different things

Yes, i have the same problem as you guys, the removal tool from Norton can't help at all. Is there any one have solution. Thanks. Sam