Re: can't remove blaster variant
From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 09/20/03
- Next message: David H. Lipman: "Re: Phony MS email w. pack86.exe attachment"
- Previous message: David H. Lipman: "Re: can't remove blaster variant"
- In reply to: Kevin: "Re: can't remove blaster variant"
- Next in thread: Kevin: "Re: can't remove blaster variant"
- Reply: Kevin: "Re: can't remove blaster variant"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 19 Sep 2003 19:01:18 -0400
Boy are YOU wrong. McAfee doesn't even call it: W32.Nachi.A
McAfee calls it: W32/Nachi.worm
Dave
"Kevin" <warhawk@nospam.shaw.ca> wrote in message
news:uydu46vfDHA.696@TK2MSFTNGP09.phx.gbl...
| You are obviously using McAffee, try this:
| http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html
| or run the scanner here:
|
| http://security.symantec.com/default.asp
|
| --
|
| Kevin
|
|
| "Andreas Strohkirch" <webmaster@media-networks.de> wrote in message
| news:eDlqcEmfDHA.1760@TK2MSFTNGP09.phx.gbl...
| > Hi,
| > my system seems to be infected by the blaster virus, similar to
| W32.Nachi.A
| > and I can't remove it!!! My internet connection is breaking down and I got
| > several processes, which start automatically anew, when I am stopping
| them:
| >
| > alg.exe (only sometimes)
| > dllhost.exe (only sometimes)
| > svchost.exe (always, the instance which is permanently sending data into
| the
| > net)
| >
| > Also when I try to stop the process inetinfo.exe'', all the above tasks
| will
| > start at once and the inetinfo.exe won't close.
| >
| > I have tried the following:
| > - closed the security holes with several MS patches
| > - set up my firewall
| > - checked my system with many different anti virus programs, they all
| can't
| > find any virus!!!!
| > - searched for tasks and services to stop them (I can't find the known
| ones
| > described by the virus descriptions)
| >
| > So what can I do to remove the virus?
| > Is it an unknown blaster variant?
| > Has anybody made a similar experience?
| >
| > I am very thankful for every help!
| > Andreas Strohkirch.
| >
| >
|
- Next message: David H. Lipman: "Re: Phony MS email w. pack86.exe attachment"
- Previous message: David H. Lipman: "Re: can't remove blaster variant"
- In reply to: Kevin: "Re: can't remove blaster variant"
- Next in thread: Kevin: "Re: can't remove blaster variant"
- Reply: Kevin: "Re: can't remove blaster variant"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
