|
| Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free! |
W32.Nimda.enc and W32.Nimda.E@mm
|
Original Message
|
Name: Kevin
Date: October 10, 2002 at 11:48:47 Pacific
Subject: W32.Nimda.enc and W32.Nimda.E@mmOS: XPCPU/Ram: Pentium III |
Comment: I've got this virus W32.Nimda.enc I found an old message string where people reccomended Panda virus management software and I ran it but the virus persists in propigating on my machine. Norton has quarentined all of the files but more keep popping up. Someone else has reccomended a removal tool for W32.Nimda.E@mm but that seems different from the virus I have. Are the two the same?
Report Offensive Message For Removal
|
|
Response Number 1
|
Name: capt
Date: October 10, 2002 at 13:30:47 Pacific
|
Reply: (edit)Have you disabled your "system restore" feature, as the virus will be regenerating from it, as "system restore" is not part of the cleaning and detection by your antivirus software. After you disable it, run the Norton scan/tool. When you have the system cleaned you then set a new "system restore" point and enable it. If you want a second antivirus opinion use the free on-line scans at websites of Trend Micro, Macafee, Panda before enabling "system restore". The virus should then be gone and not return.
Report Offensive Follow Up For Removal
|
|
Response Number 2
|
Name: John
Date: October 10, 2002 at 14:17:54 Pacific
|
Reply: (edit)Remember if a file is in use by the O/S it will not quarentine or delete. download the repair tool for Nimda. reboot in safe mode and run the tool.
Report Offensive Follow Up For Removal
|
|
Response Number 3
|
Name: maddy
Date: October 13, 2002 at 19:41:20 Pacific
|
Reply: (edit)i have windows ex and i have a virus alert popping up in my c:\documents and settings\all users... file. The file that is said to be corrputed has an extention of .eml. From the research i have done, i found out that this is a outlook file. I dont used outlook. The virus is W32.Nimda.enc but the Norton Antivirus is unable to repair this file. Ive manually gone through the files to find them but they dont exist in my computer. Any suggestions?
Report Offensive Follow Up For Removal
|
|
Response Number 4
|
Name: Matt
Date: October 14, 2002 at 15:54:00 Pacific
|
Reply: (edit)Well I think, but i'm not sure. I had the same problem with the c:\documents and settings\all users... and I couldn't find the files. It turned out because i'm part of a network thing with all my dormmates, when i did a full system virus check, it would check their computers as well. That's why norton couldn't do anything to the files and I couldn't find em, once I left the network I didn't have the problem anymore. Don't know if that will help you at all. Good luck!
Report Offensive Follow Up For Removal
|
|
Response Number 5
|
Name: tunde
Date: October 16, 2002 at 10:41:16 Pacific
|
Reply: (edit) I really am glad i found this medium and i'm grateful to google as well. I have the same nimda problem. While i have read the responses, nobody seems to have recommended a particularly effective antivirus that will absolutely clean permanently and efficiently this w32.nimda.enc virus and,or its family. Does such an antivirus exist? both for stand alone or network scenario, or stand alone only. Norton doesn't seem to have done the job for me.(norton 2002). I'm aware the virus has been around since Sept 12 2001, so someone must have definately done something about it. THIS IS VERY IMPORTANT FOR ALL OF US SINCE THERE IS A "W32.BUGBEAR....", A NEW VIRUS NOT MORE THAN A MONTH OR SO IN AGE AND DEFINITELY MORE POTENT. Thank you very much.
Report Offensive Follow Up For Removal
|
|
Response Number 6
|
Name: carol
Date: October 22, 2002 at 15:29:27 Pacific
|
Reply: (edit)i have a diffrent W32 virus called " W32.Splore.mm " I did a scan on my computer and I had 6 files infected, which i was able to Quarentined and delete, except for one. This W32 garbage!! Help!! When i go to quarentine it it says " quarentine failed" how do i remove this horrible thing??
Report Offensive Follow Up For Removal
|
|
Response Number 7
|
Name: josh
Date: November 4, 2002 at 12:01:09 Pacific
|
Reply: (edit)Alerts pop up and show infected files, they say access denied i search for the files but i can't find them. any suggestions
Report Offensive Follow Up For Removal
|
|
Response Number 8
|
Name: Adam
Date: November 11, 2002 at 04:34:10 Pacific
|
Reply: (edit)I have been bothered by this very same virus. It puts .eml files all over my computer. I have done everything from running the tool to installing a corporate edition of Norton. Is there and solution at all? I have tried on-line scans and they don't seem to help either. What do I do???
Report Offensive Follow Up For Removal
|
|
Response Number 9
|
Name: Alex
Date: November 11, 2002 at 08:32:26 Pacific
|
Reply: (edit)please if any one of you comes with asolution to thses help me know cause this has really disturbed me in our network pleaseee help before its too late
Report Offensive Follow Up For Removal
|
|
Response Number 10
|
Name: Yaniv
Date: November 13, 2002 at 15:08:32 Pacific
|
Reply: (edit)There is a removal tool at : http://securityresponse.symantec.com/avcenter/venc/data/w32.nimda.e@mm.removal.tool.html but it couldnt find the worm on my computer even though the .eml files are spreading all over my computer and the network, maybe that tool is too old! There is more info and a remover on panda: http://www.myotherwebsite.com/fss/pandavirusremoval.htm and another remover from McAfee: http://www.mcafee.com/support/onlineservices/faqs.asp?search=W32.Nimda.enc
Report Offensive Follow Up For Removal
|
|
Response Number 11
|
Name: david
Date: November 20, 2002 at 17:26:47 Pacific
|
Reply: (edit)I sent this E-mail to McAfee and Notron... The Tool http://download.nai.com/products/mcafee-avert/NimdaScn.zip did not find the virus named W32.Nimda.enc and w32.Nimda.A@mm (dr). The infected Dell inspiron 5000 laptop, that us running O/S windows XP Home is unplugged from the network and running in safe mode. I tried using a tool provide by Norton Antivirus also, but did not work. The network that the laptop was connected to consists of 3 laptops two of them are running XP one of them is running Windows 2000pro. And Two PCs each running O/S windows XP. The network is a 11mb wireless network. I did the same checks on each computer and nothing. The Dell 5000 had MANY messages from its virus scanner stating that it was found W32.Nimda.enc located in the Doc DIR. when I clicked ok they kept popping up over and over but showing the virus different locations. With in the many pop ups the Virus named W32.Nimda.A@mm (dr) was showing too. Doing some research I found that the 1st virus I was talking about is 0 bytes in length, but the 2nd virus (W32.Nimda.A@mm (dr)) is 57344 bytes in length. Kind of big right? (For a virus). Plez contact me. David H.Wandt The Cubb Institute djhersh@optonline.net 631-351-4012
Report Offensive Follow Up For Removal
|

Post Locked
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
Go to Security and Virus Forum Home
|
|
|