Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.
NACHI worm
Name: ferz Date: October 13, 2003 at 11:33:53 Pacific OS: xp home CPU/Ram: 256 gig
Comment:
Help!! AVG virus scan found a Nachi worm but cannot remove it? What program can I use to get rid of it? It is in the system32\wins\dllhost.exe file
Name: praetorians Date: October 13, 2003 at 11:38:03 Pacific
Reply:
Try to remove it using Panda Antivirus.
::praetorians::
0
Response Number 2
Name: praetorians Date: October 13, 2003 at 11:38:42 Pacific
Reply:
Try to remove it using Panda Antivirus.
::praetorians::
0
Response Number 3
Name: ctcnetwork Date: October 13, 2003 at 11:48:15 Pacific
Reply:
I have a feeling you may have to work in safe mode to remove.
However Norton have a removal too for this little devil which you can download here :- http://www.symantec.com/avcenter/FixWelch.exe
They have the full spec for this virus/worm and details of the removal process here :- http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html
You may also need to turn off your system restore BEFORE running the removal tool. Check the spec/info page first.
Good Luck . . .
:o)
0
Response Number 4
Name: Lesley Date: October 13, 2003 at 12:10:55 Pacific
Reply:
ferz
If you go to Symantec for the Removal Tool as per the above Post - before you Download the Tool - Print out the Instructions - and then read carefully - twice - before you start - follow the Instructions to the letter
Lesley
0
Response Number 5
Name: ranchhand Date: October 13, 2003 at 13:48:41 Pacific
Reply:
Didn't your AV proggie move the virus to Quarantine? You should be safe.
0
Response Number 6
Name: RussellR Date: October 13, 2003 at 13:58:43 Pacific
Reply:
update AVG if you havent already!
0
Response Number 7
Name: ferz Date: October 13, 2003 at 17:48:04 Pacific
Reply:
AVG could not put the virus in their Vault and heal it. That's why I went to Symantec. I have removed it already. I have only a free version of AVG.
0
Response Number 8
Name: ctcnetwork Date: October 13, 2003 at 20:13:27 Pacific
Reply:
The free version will stop you becoming infected, given that it has been set up to scan emails and opened files etc . .
It's what I have been using for the last year or so. Catches them every time . . ;o)
Summary: *how to get access to system volume information* + question regarding the nachi worm that's out there: i too had a message from mcaffee antivirus saying the nachi worm has hidden itself in the system ...
Summary: Steve, Go to the link below and download & run the "McAfee AVERT Stinger" tool. McAfee AVERT Stinger More info at the link below. W32/Nachi.worm Information HTH, Tufenuf ...
0 
DualBoot via Boot.ini for...
