net1.exe and NIMDA Help !

[IBI]

HI,
random appears some "prompt of dos" named net1.exe.
I know that net1.exe is the application for the net account command but why appears this windows ?
I read that nimda worm is the cause of my problems but i have installed all the patch that I find in microsoft's site.
Now these windows appears on every my nt servers !
What I can do to disable this windows?
I use InoculanIT version 4.53 build 736, engine version 35.00, signature version 35.28. My servers are windows Nt 4.0 sp6a.
Thanks
IBI

 

[AVChap]

Try using a different AV program and run a FULL SCAN (i.e. include all files in the scan) on the machine. Make sure you're NOT connected to any network when doing this. If this still doesn't turn up anything, try submitting that NET1.EXE file to AV vendors for analysis.

Hope this helps.

AVChap

 

[Kento]

run a scan here:

http://housecall.antivirus.com/

 

[IBI]

My antivirus have detected Nimda worm and I have cleaned my NT server; after I've installed all microsoft's patch.
However " black windows" named net1.exe appear and disappear !

Why if i haven't any virus this "black windows" persecute me ?

by
IBI

 

[AVChap]

Like I mentioned before, send the file to AV vendors for analysis. They should be able to tell you the nature of the file and its inner workings.

AVChap

 

[IBI]

My AV vendor says that since the local scanner does not report any virus there isn't any virus !
I read that NIMDA is my problem on this link:

http://archives.neohapsis.com/archives/win2ksecadvice/2001-q3/0114.html

....but i haven't any solution . I succeed to clean my server if i disable the network but when I put it on the network my "black windows" appears.

Any ideas ?
Thanks
IBI

 

[AVChap]

Think of it as something like getting a second opinion. Not hitting on CA but they're not really the most reputable. No harm getting a second opinion.

Just helping.

AVChap