Nimda Worm Infection???!!!

  Major Disaster 11:26 11 Jun 2005

Ive just run an ewido scan (a great free AV) and it found Worm.Nimda in C:\I386\NETMEET.HTM and C:\WINDOWS\$ServicePackUninstall$\netmeet.htm. I just did a google on this worm and found the Symantec Response [email protected]" title="[email protected]" TARGET="_new">click here stating that "The worm now copies itself to the \%Windows% folder as Csrss.exe instead of Mmc.exe" well ive just checked and ive got csrss.exe running in task manager under processes (sysetm) using 4,000k of memory. Is this the virus and should i end this process as well as deleting the files ewido found?
Any help is much appreciated

  SANTOS7 11:32 11 Jun 2005

[email protected]" title="[email protected]" TARGET="_new">click here
this may help..

  SANTOS7 11:32 11 Jun 2005

[email protected]" title="[email protected]" TARGET="_new">click here
try this

  SANTOS7 11:33 11 Jun 2005

the link should be to a removal tool but not sure whats giong on at moment

  DieSse 11:35 11 Jun 2005

Yup - crss should be running - and it does take 4020K in my system.

I suggest you recheck with another AV - you might have a "false positive" (ie a virus wrongly detected where there isn't one).

What AV are you running that you think may have let such an old worm in?

  SANTOS7 11:36 11 Jun 2005

click here
lets try this way

  Major Disaster 11:36 11 Jun 2005

The only thing is i dont know what varient of the worm it is! It only says worm.nimda Its in the quarentine now, so should i "remove it finally"?

  GANDALF <|:-)> 11:38 11 Jun 2005



  Major Disaster 11:40 11 Jun 2005

Um sorry DieSse, i didnt see your post. I have got Mcafee Virus Scan, up to date, A squared free version, Ewido free version that just found it, Mcafee Firewall (old version), ms antispyware, adaware and spybot, my pc is like fort knocks!

  DieSse 11:58 11 Jun 2005

What does McAfee say - does it report a virus?

That's what makes me wonder about a false report from a little known free AV.

  Major Disaster 12:00 11 Jun 2005

well ive just deleted the two files. Mcafee didnt find anythink through the first time i run ewido (the full trial) it found some trojans that macfaee has never found. It is a great AV, really even the free one. click here

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

AMD Radeon Adrenalin release date, new features, compatible graphics cards

8 brilliant character artists speaking at Pictoplasma 2018

iMac Pro release date, UK price & specs

Football : comment regarder la Ligue 1 en direct ?