VirusScan and Nachi, Help!!!

[Jennk]

I have VirusScan 7.1 Enterprise installed on about 100 machines. The
definitions are all up to date. The machines are all patched and up to
date. Here's the problem:

The users are coming in in the morning and when attempting to log in, no
icons show up and the machine hangs.

There is an associated entry in the Virus Scan On Access Log that shows:

2/24/2004 5:59:49 AM Move Failed (Clean Failed) NT Authority/System
c:\windows\system32\config\systemprofile\local settings\temporary internet
files\content.ie5\wfk34bk5\wkspatch[8].exe w32/Nachi.worm.b

I've tried scanning, using Stinger, FixWelch, Blastcln, etc. Stinger finds
nothing and the machine comes up clean. Help!!! I never realized how bad
McAfee tech support actually is....

 

[Geese_Hunter]

I have VirusScan 7.1 Enterprise installed on about 100 machines. The
definitions are all up to date. The machines are all patched and up to
date. Here's the problem:

The users are coming in in the morning and when attempting to log in, no
icons show up and the machine hangs.

There is an associated entry in the Virus Scan On Access Log that shows:

2/24/2004 5:59:49 AM Move Failed (Clean Failed) NT Authority/System
c:\windows\system32\config\systemprofile\local settings\temporary internet
files\content.ie5\wfk34bk5\wkspatch[8].exe w32/Nachi.worm.b

I've tried scanning, using Stinger, FixWelch, Blastcln, etc. Stinger finds
nothing and the machine comes up clean. Help!!! I never realized how bad
McAfee tech support actually is....

Take a look at the sophos site:
sophos.com/support/disinfection/nachia.html

 

[Peacekeeper]

Post to the corporate forums they will support you better if above link not
all you need.
http://forums.mcafeehelp.com/viewforum.php?f=36

Peace

I have VirusScan 7.1 Enterprise installed on about 100 machines. The
definitions are all up to date. The machines are all patched and up to
date. Here's the problem:

The users are coming in in the morning and when attempting to log in, no
icons show up and the machine hangs.

There is an associated entry in the Virus Scan On Access Log that shows:

2/24/2004 5:59:49 AM Move Failed (Clean Failed) NT Authority/System
c:\windows\system32\config\systemprofile\local settings\temporary internet
files\content.ie5\wfk34bk5\wkspatch[8].exe w32/Nachi.worm.b

I've tried scanning, using Stinger, FixWelch, Blastcln, etc. Stinger finds
nothing and the machine comes up clean. Help!!! I never realized how bad
McAfee tech support actually is....

Take a look at the sophos site:
sophos.com/support/disinfection/nachia.html