norton antivirus located a virus, virus is now in quarantine, what should i do now? help...
virus: W32.Nimda.A@mm(dll)
file: c:\inetpub\scripts\TFTP700 and c:\inetpub\scripts\TFTP1192
location: quarantine
thanks
virus in quarantine
I have sulfnbk.ex.... in c:windows\command. it has a black icon. I was directed to a page at SARC, but I don't know how to isolate it and send it to them for analyis as they requested. I didn't get it as an attachment in an email. I did have some connectivity problems and was told to shutdown ZoneAlarm temporarily while on the phone with tech help. I think I may have got it then.....?
thanks in advance for any help!
thanks in advance for any help!
Check this link for info on that file.
http://www.symantec.com/avcenter/venc/d ... rning.html
And this one too
http://www.vmyths.com/hoax.cfm?id=257&page=3
http://www.symantec.com/avcenter/venc/d ... rning.html
And this one too
http://www.vmyths.com/hoax.cfm?id=257&page=3
-
Lucky
continue to get same virus
went out and left my computer running for some hours. returned to see that 18 additional detections of the W32.Nimda.A@mm(dll) virus were located and then placed in quarantine. although, i think some of the files had a the virus W32.Nimda.E
restarted computer and another file appeared with the virus. it appears to me that the files are being generated and most have the virus. this occurs in the c:\inetpub\scripts\ directory and all the files being generated start with TFTP and are followed by either 3 or 4 digits.
what are these files? why are they being generated? is there something i can or should do?
thanks and sorry for all the questions- i just don't know much about this.
restarted computer and another file appeared with the virus. it appears to me that the files are being generated and most have the virus. this occurs in the c:\inetpub\scripts\ directory and all the files being generated start with TFTP and are followed by either 3 or 4 digits.
what are these files? why are they being generated? is there something i can or should do?
thanks and sorry for all the questions- i just don't know much about this.
There are tools to rid yourself of this virus.
Try the sites below. They all contain removal info.
Be sure to follow the steps as they are laid out.
http://virus.pandasoftware.com/
http://www.antivirus.com/vinfo/virusenc ... PE_NIMDA.A
http://www.europe.f-secure.com/v-descs/nimda.shtml
http://www.sophos.com/virusinfo/analyses/w32nimdaa.html
http://www.monitortoday.com/Anti-virus/ ... -20.1.html
http://www.eeye.com/html/Research/Tools/nimda.html
Free utility to do text search and replace operations on text files to aid in fixing web pages that Nimda modifies:
http://www.moosoft.com/fixfiles_beta.zip
I would suggest the last of the tool list. From what has been said it is good. I do not know this from 1st hand experience. I've never had the pleasure of Nimda's company.
You have work to do. Take it steady and be cool.
Croc. [
Try the sites below. They all contain removal info.
Be sure to follow the steps as they are laid out.
http://virus.pandasoftware.com/
http://www.antivirus.com/vinfo/virusenc ... PE_NIMDA.A
http://www.europe.f-secure.com/v-descs/nimda.shtml
http://www.sophos.com/virusinfo/analyses/w32nimdaa.html
http://www.monitortoday.com/Anti-virus/ ... -20.1.html
http://www.eeye.com/html/Research/Tools/nimda.html
Free utility to do text search and replace operations on text files to aid in fixing web pages that Nimda modifies:
http://www.moosoft.com/fixfiles_beta.zip
I would suggest the last of the tool list. From what has been said it is good. I do not know this from 1st hand experience. I've never had the pleasure of Nimda's company.
You have work to do. Take it steady and be cool.
Croc. [
Croc.
Remember: Wherever you go in life, you take yourself with you.It will be long, it will be hard and there will be no withdrawal.
Winston Churchill