Worm/Nachi

P

Pebso

If this has been asked before please excuse me.

Stupidly whilst reinstalling Windows (because of an idiosyncrasy with
Btopenworld broadband a clean installation was necessary) I did not install
my anti-virus software or Firewall before installing anything else and
became infected with 2 worms LovesanA & Nachi. AVG has healed Lovesan A but
not Nachi.

As this worm was shutting the pc down regularly I have followed advice given
in earlier replies concerning W32.blastter.worm and have at least stopped
the shutting down. AVG cannot clean the file "Win/Sys32/wins/dllhost.exe
although it has quarantined it how do I remove the worm, please?

Pebso
 
M

MCR

Pebso said:
If this has been asked before please excuse me.

Stupidly whilst reinstalling Windows (because of an idiosyncrasy with
Btopenworld broadband a clean installation was necessary) I did not install
my anti-virus software or Firewall before installing anything else and
became infected with 2 worms LovesanA & Nachi. AVG has healed Lovesan A but
not Nachi.

As this worm was shutting the pc down regularly I have followed advice given
in earlier replies concerning W32.blastter.worm and have at least stopped
the shutting down. AVG cannot clean the file "Win/Sys32/wins/dllhost.exe
although it has quarantined it how do I remove the worm, please?

Pebso
Click to expand...
This may be bad advice, but I had EXACTLY the same problem with them
two. I deleted the dllhost.exe and my system has been rock solid since.
 
G

Guest

The nachi worm has different names. Its also known as
the MSBlast worm. Here's a link to remove it.
http://securityresponse.symantec.com/avcenter/venc/data/w3
2.welchia.worm.html
-----Original Message-----
If this has been asked before please excuse me.

Stupidly whilst reinstalling Windows (because of an idiosyncrasy with
Btopenworld broadband a clean installation was necessary) I did not install
my anti-virus software or Firewall before installing anything else and
became infected with 2 worms LovesanA & Nachi. AVG has healed Lovesan A but
not Nachi.

As this worm was shutting the pc down regularly I have followed advice given
in earlier replies concerning W32.blastter.worm and have at least stopped
the shutting down. AVG cannot clean the
Click to expand...
file "Win/Sys32/wins/dllhost.exe
 
P

Pebso

Thank's for your input; it's certainly tempting. What does Dllhost.exe do?
My daughter uses WinXp could I ask her to let me have a copy of her file to
replace mine if I delete it?

Since my initial post I see that AVG could not quarantine the file and so
it's still there.

Pebso
 
P

Pebso

Thank you. Unfortunately that link no longer works. I have looked at the
Symantec AV site and the blaster worm isn't mentioned
 
P

Pebso

Stinger did the trick; thank you all.

Pebso
Bruce Chambers said:
Greetings --

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
Click to expand...
 
B

Bruce Chambers

Greetings --

You're welcome.

Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Worm\SpyBot 2
nachi(welch) 2
Sasum Frasum Worm 4
FWT Newsletter - Weekly - October 11, 2004 0

Top