Re: w32 welchia worm symptoms

From: Timbersnake (Timbersnake_at_discussions.microsoft.com)
Date: 08/30/05 

Date: Tue, 30 Aug 2005 05:25:29 -0700

Hi,
I have done the SP2 technique, i will see if this works. Zonealarm reset all
its configurations on itys own, and as a result asks for permissions on
inbound and outbound access. This is not a problem, but it did make me aware
of a "generic host process" called svchost.exe. If the SP2 trick doesnt work,
i will try the others n take it from there. I wont know until i do a complete
shutdown, n start again.

The virus cleaners i meant are ad-aware, spybot and norton.

"Galen" wrote:

> In news:B28FC4B2-93BB-463B-A9DC-CC0EB2B792D2@microsoft.com,
> Timbersnake <Timbersnake@discussions.microsoft.com> had this to say:
>
> My reply is at the bottom of your sent message:
>
> > Hi,
> > I have windows XP pro, with all the latest security updates and
> > service packs. I have a 1200 mhz processor, 20gb HD with over half
> > free, and 256 DDR RAM. have a 2mb broadband cable internet
> > connection.
> >
> > Now, for quite a while now, my computer has started to have weird
> > problems. After initial boot, once the computer is fully loaded and
> > running, the PC will either shutdown, go into standby or just
> > restart. No warning, it just does it. Then I have to fight with the
> > computer for another 2-3 attempts with its sudden shutting off and me
> > then restarting it, until i get in. Once its up, it then stays up.
> >
> > Also. my internet connection seems to drift from full speed, to very
> > slow speed (should be 240kbps but sometimes as little as 1-40 even on
> > known high speed sites) to just not working or connecting at all.
> >
> > Ive heard of a virus called w32.welchia.worm. It causes the computer
> > to have these symptoms.
> >
> > So far I have:
> > Downloaded and installed all microsoft security updates and service
> > packs Run three anti-virus programs on it
> > Used 'Easycleaner'
> > Used a symantic welchia worm removal tool. It said it could not
> > detect it on my computer.
> >
> > And yet I still have these same symptoms. Any ideas guys? I really
> > dont want to keep fighting the computer to log on like this, it cant
> > be good for the computer!!??
>
> You mention virus cleaners. It could be a trojan, spyware, a worm, or even a
> blended threat that your chosen products haven't the definitions for. Take a
> peek here:
>
> Malware Cleaning :
> http://kgiii.info/windows/all/general/malwarefix.html
>
> Install, update, scan in safe mode. If worse comes to worse post back if the
> symptoms continue.
>
> Galen
> --
>
> "You know that a conjurer gets no credit when once he has explained his
> trick; and if I show you too much of my method of working, you will
> come to the conclusion that I am a very ordinary individual after all."
>
> Sherlock Holmes
>
>
>