Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

I believe I have a W32 Nimda virus or worm....


  • Please log in to reply

#1
ericaowens

ericaowens

    Member

  • Member
  • PipPip
  • 10 posts
I kept getting a popup called "README.EML" (not on the internet but it pops up as a download and asks me to open it in outlook...every time i delete it, it comes right back)
I never clicked it but on google it said that file is some Nimda virus that copies itself over and over and over...
I used the microsoft malicious spyware protection tool and it scanned over 700,000 files and over 60,000 were infected...but i dont know what they were infected with. the end results said that lots of files were infected with Win 32
i posted a hijack log and combo fix log in the proper thread.

also of the 60,000 files that were "infected"...i noticed that in the "system audio information..." part over 50,000 of the infected files were names like 'xxxxxxxxx.exe" i need help!!

Edited by ericaowens, 10 October 2007 - 05:47 PM.

  • 0

Advertisements


#2
ericaowens

ericaowens

    Member

  • Topic Starter
  • Member
  • PipPip
  • 10 posts
Attached File  HiJackThis_log.txt   7.33KB   63 downloads
  • 0

#3
ericaowens

ericaowens

    Member

  • Topic Starter
  • Member
  • PipPip
  • 10 posts
Attached File  ComboFix_log.txt   23.27KB   75 downloads
  • 0

#4
Major Payne

Major Payne

    Retired Staff

  • Retired Staff
  • 5,307 posts
Hi:

Please do not post a HJT log in this section of the forum. No one but a Malware Expert is allowed to help you with this and only in the Malware section of the forum.


Please go to the Malware section of this forum and follow the instructions at the top. Especially the Click Here link. That will give you several steps that will help you clean up most of all problems by yourself. If at the end of the cleanup process you are still having difficulty, and you may not be, then post a hijackthis log in THAT forum.

Please be patient as the "Malware Forum" is a very busy place and a two or three day wait is not unusual.

If you are still having problems after getting a clean bill of health from the Malware Section, please return to this thread. Please do not post a HiJackThis log in this thread unless asked to do so and then only as an attachment. To attach log, when requested, either change the .log extension to .txt, or put the log into a compressed (zipped) folder.

Please post back if your problem has been solved.

Ron
  • 0

#5
ericaowens

ericaowens

    Member

  • Topic Starter
  • Member
  • PipPip
  • 10 posts
:)

sorry
where do i post the combo log? or do i wait til someone asks?!
  • 0

#6
Major Payne

Major Payne

    Retired Staff

  • Retired Staff
  • 5,307 posts
All information is in my post with the correct links where you have to go. There are things you must do first as given in the pinned topics and then when requested to post an HJT do so. Recommend you remove the content of logs posted here.

Ron
  • 0

#7
ericaowens

ericaowens

    Member

  • Topic Starter
  • Member
  • PipPip
  • 10 posts
thanks. sorry again
  • 0

#8
Major Payne

Major Payne

    Retired Staff

  • Retired Staff
  • 5,307 posts
No problem, but please stick with the malware people until you are told you are clean. Good luck.

Ron
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP