Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Short and simple:
Norton has detected w32.nimba.enc virus on several of my files. Norton could not repair the files, and instead quarantined them. I deleted them to remove the threat. A few minutes later, norton detected more infected files that it could not repair and quarantined them.
I've heard that norton had falsely reported this virus in the past, and since I have a relatively new system, it might be doing so again on one of my programs. The infected files always end in .eml and are often from C:\pmu
System: AMD Athlon XP 1.6GH, Win XP Home, Raedon Fire GL 8500 video card, Soundblaster Audigy sound card, Microsoft Office XP, 256MB DDR RAM, 60 gig space.

You need to disable System restore. To do this you right click the MY Computer Icon>Properties>System Restore Tab>turn off System Restore on all drives>click OK and restart. Run the virus scan again and delete the virus. When your system is clean, then enable System Restore.

Did what you suggested capt.
While I wait to see whether that removed the virus completely or not...another problem:
My old P3 600 boots me from nearly every program I run on it (it doesn't boot from internet explorer), and it also stalls often. And I mean VERY often. every couple of minutes it will either stall or boot from the program. I couldn't figure it out so I took it to an expert I knew and we formated C drive and re-installed everything from scratch. drivers, everything (4 times). It still booted and stalled. So then I bought a new 600 board. It still booted and stalled. I wasn't going to spend any more money on it, so I bought my current system and abandoned it. Ideas...anyone?

oh ya...I got the bloodhound virus on my computer before these problems started...could it have perhapse damaged some systems and caused this problem? I formatted after I got it.

If you f-disked before formatting, re-wrote teh MBR, and used a clean bootup disk, I'd guess you got rid of any "nasty" on the disk.
My guess would be hardware related, possible overheating, or a failing power supply for starters. Of course, you could go thru component by component and most could cause those symptoms....loose connections, bad ram, bad harddrive, bad motherboard or ide controller...
You don't mention any specific error messages. Nor what programs are affected. Of course if you got ahold of a virused proggy and keep installing it on a clean hard drive, 'taint gonna be clean for long!
Good luck.

Thanks for the webpage Jaz.
I know that the problem with my old 600 isn't heating or power supply. Is there any way of determining which part is causing the problem? It uses a 98 os.

ok, the advice capt gave me didn't work. Norton says that there are still viruses on my files.
I looked more closely, and they are all microsoft outlook files or application extensions and end in either .eml, .nws, or .dll.
I went to http://www.pandasoftware.com/activescan/activescan.asp?language=2&Country=63&Partner=1&Ref=EN-PR-AS-107
and ran the panda virus scan, and it showed that there were no viruses on my computer. And the strange thing about this is that WHILE panda was scanning for viruses, norton was telling me that I have more infected files. I have 54 infected files quarantined now. all outlook or extension files. If I delete them they come back, even with disabling system restore, and panda says that there are no viruses on my computer. whats going on???

As soon as I finished posting that last message, norton told me that It found more infected files, for a total of 101 infected files now.
I'm deleting outlook now. Since these are all dll or eml or nws files, mebe someone is sending em to me. Ideas? anyone?

Another tool to try, hope it helps.
http://www.bitdefender.com/download/download.php?file=AntiNimda.exe

None of the virus removal tools I use or download (and I've tried all the recommended ones) seem to be able to detect the virus, although I can go looking for myself and find its extension (riched.dll) rather easily, but everytime I delete it, it pops back up, even with system restore disabled. Its probably integrated itself into part of my system.ini stuff. how u dig it out of there?

I dont know if you'all be reading this but I also got the same problem Gordon does and I dont know how to get rid of it....
This time even though I run the Norton Antivirus scan, It comes up negative... Yet every 30 minutes or so a pop-up screen comes up and says that some .eml files are infected with the W32.nimba.enc virus and cant be repaired and have to be quarantined.
A tried deleting it as well but it keeps on coming and coming....
ANY SUGGESTIONS ANYONE!!!!!!

Some Viri will attack norton when they are unleashed disabling the Wondows side of the antivirus tool. I have found that PCcillin is a great resource here as it will not install on an infected system. It scans the entire C:\ partition. This is great cause as it access each infected file the DOS side of norton which is still functional will popup allowing you to clean the system.
You will have a lot of .rbo files after the cleaning; these are the old infected files delete them. they will take up a lot of space.
After the cleaning you will need to redo your system depending on what was infected your system can get pretty unstable.
Make sure you are using uninfected install disks make sure you over wright the Master Boot Record (MBR).
If you do not rebuild the MBR the virus can come back right from your hard drive.
Destroying the partition with Fdisk will not rebuild the MBR if you format with the same OS you were using. Fdisk kill the partition rebuild the partition and format the drive with Win95 or somthing. Do it all again and format with the OS of you choice assuming that you are not running Win95. There is alos a command that will force an MBR rebuild but I can't remember what it is off the top.
The Rebooting PC
The Processor has a special device hooked to it on the motherboard called an LDO (Low Voltage Dropout)if for any reason the powersuppy drops its 5 volt line below approx 4.2 volts this chip will sen the processor a rest signal the same as if you hit the reset button on the front of the PC.
The reason for this chip is so the Processor is not trying to run in a current starved environment which can damage the device.some thing that you can check:
Use a volt meter and monitor the 5 Volt line on your powersupply (generly the red wire on connector plugged into the HD).
If this is not for you thaen try these steps.
3D video cards draw more current then standard VGA cards revert the video on your 3D card to standard and that shuts down most of the use of the GPU (Graphics Processor Unit)on the video card. Draws a whole lot less current. If you have stuffed every option card and extra device you possibly can
into this PC and never upgraded the powersupply unplug devices until you get reliable system operation. Upgrade the PS.You may also have a bad video card or other option card or device drawing to much current from the PS. I had a video card doing the same thing in a PIII HP Kayak killing the power supply.
Just take a ver systematic approach and you will find the problem.
And just cause a Power Supply is new does not mean s--- I have bought brand new ones bad out of the box.
I have an AMD slotA 500MHZ server with a 500watt PS 4 hard drives - 3 NICs - ATI Rage Fury Pro 128 - SB live 5.1 platinum - Cdrom - CD-burner - several cooling fans. The more crap you stuff in a PC the more power that is required to run the damn thing.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |