Re: the W32 Welchia Worm

From: Jurren Bouman (jubo.linux_at_euronet.nl)
Date: 10/18/03


Date: Sat, 18 Oct 2003 22:02:45 +0200


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Janice wrote:
> Hi,
> I have tried to get rid of this worm on my computer, but
> nothing seems to help. I've downloaded security patches
> and looks for updates daily. I even downloaded the patch
> for windows 2000 - which I run - called KB823980-x86-
> EMI/EXE from the windows download section, but the worm
> is still with me even as I write this. I installed Norton
> Security but it cannot get rid of it. This is showing up
> as C:/WINNT/System32/wins/DLLHOST.EXE. Can anyone tell me
> how to get rid of this manually? Your help is very much
> needed and appreciated. Thanks in advance.

Check this article:
http://vil.nai.com/vil/content/v_100559.htm

You can also do an online scan at panda:
http://www.pandasoftware.com/products/activescan/

- --
Jurren Bouman
MS MVP Windows - Security
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE/kZxnjbhlpWhTmywRAvsqAJ4zT4ze06jlSgsHGKYJtN3+m/54OACgpsPE
qswAuGJ3sOt5NHMLb8tOZ0Y=
=nfPZ
-----END PGP SIGNATURE-----



Relevant Pages

  • Re: system shutting down when online
    ... Download and install Security patch KB824146: ... What you need to know about the Blaster Worm: ... Download and run the Blaster and Welchia worm removal tool: ...
    (microsoft.public.windowsxp.network_web)
  • Re: the W32 Welchia Worm
    ... I've downloaded security patches ... > EMI/EXE from the windows download section, but the worm ... > Security but it cannot get rid of it. ...
    (microsoft.public.security.virus)
  • the W32 Welchia Worm
    ... I've downloaded security patches ... EMI/EXE from the windows download section, but the worm ... Security but it cannot get rid of it. ...
    (microsoft.public.security.virus)
  • the W32 Welchia Worm
    ... I've downloaded security patches ... >EMI/EXE from the windows download section, but the worm ... >Security but it cannot get rid of it. ...
    (microsoft.public.security.virus)
  • Re: the W32 Welchia Worm
    ... I've downloaded security patches ... >EMI/EXE from the windows download section, but the worm ... >Security but it cannot get rid of it. ...
    (microsoft.public.security.virus)