Re: the W32 Welchia Worm

From: Andrew Z Carpenter [now with added MVP!] (azc_at_FILTERcirencester.ac.uk)
Date: 10/19/03


Date: Sun, 19 Oct 2003 12:22:46 +0100


> "Janice" <anonymous@discussions.microsoft.com> wrote in
> message news:046a01c395b0$cdca3630$a001280a@phx.gbl...
>
> Hi,
> I have tried to get rid of this worm on my computer, but
> nothing seems to help. I've downloaded security patches
> and looks for updates daily. I even downloaded the patch
> for windows 2000 - which I run - called KB823980-x86-
> EMI/EXE from the windows download section, but the worm
> is still with me even as I write this. I installed Norton
> Security but it cannot get rid of it. This is showing up
> as C:/WINNT/System32/wins/DLLHOST.EXE. Can anyone tell me
> how to get rid of this manually? Your help is very much
> needed and appreciated. Thanks in advance.

There are many removal tools for Welchia, have you tried
those?

Symantec's is here:
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

-- 
AZC
MVP
---
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.528 / Virus Database: 324 - Release Date: 16/10/2003


Relevant Pages

  • Re: the W32 Welchia Worm
    ... > EMI/EXE from the windows download section, but the worm ... > Security but it cannot get rid of it. ...
    (microsoft.public.security.virus)
  • the W32 Welchia Worm
    ... I've downloaded security patches ... EMI/EXE from the windows download section, but the worm ... Security but it cannot get rid of it. ...
    (microsoft.public.security.virus)
  • the W32 Welchia Worm
    ... I've downloaded security patches ... >EMI/EXE from the windows download section, but the worm ... >Security but it cannot get rid of it. ...
    (microsoft.public.security.virus)
  • Re: the W32 Welchia Worm
    ... I've downloaded security patches ... >EMI/EXE from the windows download section, but the worm ... >Security but it cannot get rid of it. ...
    (microsoft.public.security.virus)
  • Re: PLEASE HELP
    ... It doesn't remove the worm. ... Left Click 'Advanced' Under "Internet Connection Firewall" tick the box ... You can then connect to the Internet and download the Microsoft relevant patch. ... It has been reported that, for users of Windows XP, ...
    (microsoft.public.windowsxp.newusers)