Avatar billede abdulrich Nybegynder
26. juli 2002 - 15:42 Der er 4 kommentarer og
1 løsning

Har jeg virus?

Jeg sidder på et lokalnet, hvor jeg har haft nogle mapper til deling. Jeg har haft en 'Upload' med fuld deling på, hvor min virusscanner (Norton) har fundet virus i nogle filer, der IKKE ligger på min computer. Det viser sig, at der har været en inde og eksekverer nogle af filerne i 'Upload´en', og de filer min Norton har fundet virus i, er filnavne på hans computer. Han har været inde i flere mapper og eksekverer filer, hvor der ikke er fuld deling på, og der har Norton ikke sagt noget til. De to vira den har fundet er:

W32.Nimda.enc
W32.Nimda.A@mm (dll)

I begge tilfælde skrive den dette:

Access to the file was denied

eller

Unable to repair this file.

Hvis jeg søger på de to virusnavne på Symantec.com får jeg i begge tilfælde denne tekst frem (bare med forskellige navne):

W32.Nimda.enc, W32.Nimda.A@mm (dll)
Detected as: W32.Nimda.enc, W32.Nimda.A@mm (dll)

Aliases:
None

Characteristics:
Wild

No additional information.

This threat is detected by the latest Virus Definitions.

All computer users should employ safe computing practices, including:

Keeping your Virus Definitions updated.

Installing Norton AntiVirus program updates, when available.

Deleting suspicious looking emails.

Kan jeg tolke det som at min comp. er fri for virus? (har opdateret og scannet igen). Hvis de vira er kendt af Norton, og den skulle kunne rep. dem, må det ligge på hans comp. det hele, da den som sagt bliver nægtet adgang. Eller hvad??
Avatar billede fcs Novice
26. juli 2002 - 15:47 #1
Hent dette program: http://securityresponse.symantec.com/avcenter/Fixnimda.com

Følg denne vejledning:

3. Close all running programs before running the tool.
4. If you are running Windows Me or XP, then disable System Restore. Please refer to the section System Restore option in Windows Me/XP for additional details.

NOTE: If you are running Windows Me/XP, we strongly recommend that you do not skip this step.

5. Double-click the Fixnimda.com file to start the removal tool.

CAUTION: If you are on a network, you must apply the removal tool on all computers, including servers.

6. Click Start to begin the process, and then allow the tool to run.
7. Symantec recommends running the tool until the system is reported as clean.
8. If necessary, download the appropriate Microsoft patches to patch vulnerable systems. These patches can be found here:

http://www.microsoft.com/technet/security/bulletin/ms00-078.asp
http://www.microsoft.com/technet/security/bulletin/MS01-020.asp
http://www.microsoft.com/technet/security/bulletin/MS01-044.asp

9. If you are on a network or you have a full-time connection to the Internet, disconnect the computer from the network and the Internet. Disable or password protect file sharing before you reconnect computers to the network or to the Internet. Because this worm spreads by using shared folders on networked computers, to ensure that the worm does not reinfect the computer after it has been removed, Symantec suggests sharing with read-only access or using password protection. For instructions on how to do this, see your Windows documentation or the document How to configure shared Windows folders for maximum network protection.
10. Restart the computer.
11. Run the fixtool again to insure that the system is clean.
12. Install the necessary Microsoft patches to patch the known vulnerabilities.
13. Reconnect the clean system to the network or re-enable your full-time internet connection.
14. If you are running Windows Me/XP, then re-enable System Restore.
15. Run LiveUpdate to make sure that you are using the most current virus definitions.

NOTE: The removal procedure might be unsuccessful if Windows Me/XP System Restore is not disabled as previously directed because Windows prevents System Restore from being modified by outside programs. Because of this, the removal tool might fail.

When the tool has finished running, you will see a message indicating whether the computer was infected by the W32.Nimda.A@mm. In the case of a removal of the worm, the program displays the following results:
The total number of the scanned files.
The number of deleted files.
The number of repaired files.
The number of viral processes terminated.

Luk maskinen ned og genstart. Kør programmet igen for at checke om du stadig er inficeret.
Avatar billede hathor Nybegynder
26. juli 2002 - 15:53 #2
Du har sandsynligvis en af de ledeste viruser til dato.
Avatar billede hathor Nybegynder
26. juli 2002 - 15:53 #3
Ej okay, så slem er den heller ikke, men den er virkelig en pain in the ass.
Avatar billede abdulrich Nybegynder
27. juli 2002 - 00:33 #4
Håber ikke der er noget. Ingen af de to svar har fundet noget.
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester