W32 Nimda.enc will not go away!

[IronDert]

I constantly scan with Norton Antivirus (newest defs etc.)... My scans come up with nothing.. But EVERY morning when I wake up, I have a never ending amount of "Virus Alert" quaratined .eml files to click through... All of them are infected with W32.Nimda.enc How do I get rid of this?!? When I do a search for *.eml, I find one called "dan1.eml" in "C:\Documents and Settings\All Users\Documents\SONAR 2". BUT.. I can't delete or do anything with it... even open it or scan it..

Question 1:
How do I get rid of W32.Nimda.enc

Question 2:
How do I delete or remove dan1.eml

THANKS!!!!

 

[AVChap]

You may not be infected per se, but someone else is infected and is trying to infect your system. BTW, are you on a DSL connection? If so, that's where the virus is coming from.

Just keep updating your defs.

AVChap

 

[IronDert]

Thanks for the reply AVChap! I am on a DSL connection actually. But I get hundreds of these .eml infection popups daily when I wake up, and the location of them all is always on a different hard drive(I have four hard drives) and in a different folder, for each .eml. I'm not connected to a network, so how would these files get all over the place, even through my DSL??

 

[Guest_imported]

I am having the same problem with the w32.nimda.enc virus. It doesn't destroy my computer, but daily I find the *.eml files every where. Norton, Mcafee and practicaly the web except here knows nothing except some fluke in 2001 with the nimda.enc falsely detected by Norton from software installing program, Install Shield. I have run Norton's nimda remover, it says that it finds the virus and removes it, but it comes back the next day. If this has to do with the a DSL or cable connection, what firewall can help to block this type of crap coming into my network? Thanks in advance for help..

elastik

 

[Kento]

Have a read:

http://securityresponse.symantec.com/avcenter/venc/data/enc.detection.html

Also go here, type in nimda and hit go and see if those links help:

http://www.symantec.com/avcenter/vinfodb.html

"How do I delete or remove dan1.eml"

Try from safe mode.

 

[zmoney99]

i am having the same problem as the above and nothing seems to be workin i am useing xp professional

 

[joemccarron]

yep me too. Norton 2002 with and then update all update was the first thing I did after reformatting and installing xp. None of Nortons, or pandas, tools or manual removals work for xp. Someone said NImda could be saved in my router memory! Do I have to reformat and buy a new router?

 

[2IC]

Have you attempted to disable the system restore feature in Windows ME/XP then perform a scan using VirusScan? I was infected with the W32/Elkern.cav and found that disabling the systm restore then scanning removed it.

 

[2ffat]

With routers, you can turn them off and on. Nimda is only is RAM and should be gone when the power is off. The trick is, though, if you have multiple routers, you have to turn them all off before turning any on again or the virus just loads into memory again. While the routers are down, also make certain that Nimda is not active on any computers, too.
James P. Cottingham

When a man sits with a pretty girl for an hour, it seems like a minute. But let him sit on a hot stove for a minute and it's longer than any hour. That's relativity.
[tab][tab]Albert Einstein explaining his Theory of Relativity to a group of journalists.