CDROM-Guide forums

CDROM-Guide forums (http://www.cdrom-guide.com/forums/index.php)
-   Computer Networking & Security (http://www.cdrom-guide.com/forums/forumdisplay.php?f=36)
-   -   Is this bad? (http://www.cdrom-guide.com/forums/showthread.php?t=10050)

yeffocs Jan 22, 2002 07:10 PM

Is this bad?
 
Hi,Norton detected these and says unable to delete,what should I do?
It says it is in about 20 files.

The file
C:\DOCUMENTS AND SETTINGS\ALL USERS.WINDOWS\DOCUMENTS\my music\sample music\s6.eml
is infected with the W32.Nimda.enc virus.
Unable to repair this file.

he file
C:\DOCUMENTS AND SETTINGS\ALL USERS.WINDOWS\DOCUMENTS\MY MUSIC\SAMPLE MUSIC\mahiram.eml
is infected with the W32.Nimda.enc virus.
Unable to repair this file.

The file
C:\DOCUME~1\Steve\LOCALS~1\Temp\NAV46.tmp
is infected with the W32.Badtrans@ mm.enc virus.
Unable to repair this file.


Date: 1/19/2002, Time: 18:18:28,
The file
C:\DOCUME~1\Steve\LOCALS~1\Temp\NAV46.tmp
is infected with the W32.Badtrans@ mm.enc virus.
Access to the file was denied.

Thanks.

NotAHacker Jan 22, 2002 08:52 PM

First Norton site doesn't say how to remove the W32.Nimda.enc virus so I would delete them. They do say this
1. Make sure that you have updated your version of Internet Explorer, or that you are using a version that includes the update. For additional information, go to the [URL=***********.microsoft.com/technet/security/bulletin/MS01-020.asp]Microsoft Web page
2. Note which message is causing the alert.
3. Turn off the preview function in Microsoft Outlook or Outlook Express
Second they have a tool to remove [URL=********securityresponse.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.removal.tool.html]W32.Badtrans.B@mm I would use that.
Good Luck.

:hdspin::round::hdspin:

Lazza Jan 23, 2002 11:08 AM

Agree with you NotAHacker about the badtrans tool. It will get rid of it in about 30 seconds flat!

***Beware***

Make sure that you follow Symantec's instructions 100% before you use this tool. If you are using Me or XP make sure that you turn off the "System Restore" prog first if it is running and re-enable it after you have run the tool twice.

Also, warn anybody in your address book for Outlook that you may have infected them with this too and where to get the Symantec tool from. Otherwise it will just spread to others.

Hope this helps. :)

uk_trader Jan 24, 2002 06:35 AM

To remove nimida just reboot your machine this gets rid of it. Then download the patch or upgrade to a newer version of IE to prevent reinfection

yeffocs Jan 24, 2002 12:04 PM

Thanks
 
Cheers for the help,just done and all gone.
:tup:


All times are GMT -5. The time now is 01:23 AM.

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2018, Jelsoft Enterprises Ltd.
Copyright 1996-2009 CDROM-Guide.com. All rights reserved