virus in quarantine

General Network security, firewalls, port filtering/forwarding, wireless security, anti-spyware, as well as spam control and privacy discussions.
Post Reply
Lucky

virus in quarantine

Post by Lucky »

norton antivirus located a virus, virus is now in quarantine, what should i do now? help...

virus: W32.Nimda.A@mm(dll)
file: c:\inetpub\scripts\TFTP700 and c:\inetpub\scripts\TFTP1192
location: quarantine

thanks
User avatar
Norm
SG VIP
Posts: 14195
Joined: Tue Mar 27, 2001 12:00 pm

Post by Norm »

No need to worry, it's been quaranteened.
It can't hurt your system.
babbler
New Member
Posts: 18
Joined: Sat Jan 06, 2001 12:00 am
Location: Toronto, Canada eh.

Post by babbler »

I have sulfnbk.ex.... in c:windows\command. it has a black icon. I was directed to a page at SARC, but I don't know how to isolate it and send it to them for analyis as they requested. I didn't get it as an attachment in an email. I did have some connectivity problems and was told to shutdown ZoneAlarm temporarily while on the phone with tech help. I think I may have got it then.....?
thanks in advance for any help!
User avatar
Norm
SG VIP
Posts: 14195
Joined: Tue Mar 27, 2001 12:00 pm

Post by Norm »

Lucky

continue to get same virus

Post by Lucky »

went out and left my computer running for some hours. returned to see that 18 additional detections of the W32.Nimda.A@mm(dll) virus were located and then placed in quarantine. although, i think some of the files had a the virus W32.Nimda.E

restarted computer and another file appeared with the virus. it appears to me that the files are being generated and most have the virus. this occurs in the c:\inetpub\scripts\ directory and all the files being generated start with TFTP and are followed by either 3 or 4 digits.

what are these files? why are they being generated? is there something i can or should do?

thanks and sorry for all the questions- i just don't know much about this.
User avatar
Croc
Posts: 7818
Joined: Sat Jan 20, 2001 12:00 pm
Location: Up top East side Downunder

Post by Croc »

There are tools to rid yourself of this virus.

Try the sites below. They all contain removal info.
Be sure to follow the steps as they are laid out.

http://virus.pandasoftware.com/

http://www.antivirus.com/vinfo/virusenc ... PE_NIMDA.A

http://www.europe.f-secure.com/v-descs/nimda.shtml

http://www.sophos.com/virusinfo/analyses/w32nimdaa.html

http://www.monitortoday.com/Anti-virus/ ... -20.1.html

http://www.eeye.com/html/Research/Tools/nimda.html

Free utility to do text search and replace operations on text files to aid in fixing web pages that Nimda modifies:
http://www.moosoft.com/fixfiles_beta.zip


I would suggest the last of the tool list. From what has been said it is good. I do not know this from 1st hand experience. I've never had the pleasure of Nimda's company.

You have work to do. Take it steady and be cool.

Croc. [
Croc.
It will be long, it will be hard and there will be no withdrawal.
Winston Churchill
Remember: Wherever you go in life, you take yourself with you.
Post Reply