Welchia Worm Help

[the kid]

I am trying to delete the above from my son's computer by long
distance. He tells me:
1. The worm disables Norton AV thus he cannot upgrade his virus
protection to delete the worm.
2. After a complete format, re-install of xp, his computer was
re-infected within 5 seconds. He did this several times. Once, he
disconnected from the Net and re-loaded xp, it worked fine, and as
soon as he re-connected to the net he was infected.
3. He cannot get Windows Update to work.
4. He cannot seem to get into Safe Mode by F8.

He has been trying to get this working for a week. Any help would be
gladly accepted.

 

[PA Bear]

Send/give him:

W32.Welchia.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

Before You Connect a New Computer to the Internet
http://www.cert.org/tech_tips/before_you_plug_in.html

Windows Update Troubleshooter
http://v4.windowsupdate.microsoft.com/troubleshoot/

Why can't I download updates?
http://www.kellys-korner-xp.com/top10faqs.htm

MVP Jupiter Jones' Windows Update Webpages
http://www3.telus.net/dandemar/update.htm

And for good measure:

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.mvps.org/

Protect Your PC
http://www.microsoft.com/security/protect

 

[DennisLazo.com]

okay,

he can download a removal tool using a friend's computer from
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html
and tell him to make sure that next time he goes on line, he has to turn on
his firewall.

also, tell him to download the blaster worm patch (using a friend's
computer) from microsoft before going back on the net.

more info on blaster may be found at
http://personalinsure.about.com/cs/personalproperty/a/aa081303a.htm.

and yes, it's a catch 22 situtaion: you get on the net to protect yourself
and those worms get into your computer within five seconds; but after
infection, it becomes doubly hard to fix the problem those worms may have
caused.

hope this helps!

regards,
dennis

 

[Dave]

install xp, enable firewall, THEN connect to the web and download updates,
virus protection, etc.