W32 Welchia.gen detected using Windows XP Home Edition

[Bun Mui]

Is this a bug or what?

Even I updated with latest anti-virus program. I can't get rid of it.

This message is what it displayed on Norton Antivirus porgram.

I have my computer auto - protect enabled ever since bought from the store.

Yet this is what it suddenly displayed while I was online?
Where did it come from and how could I get rid of it?

I didn't click any attachments on e-mails or anything.


This is what was displayed.

Virus Alert

Norton Antivirus has detected a virus on your computer.

Object Name:

C:\WINDOWS\system32\config\systemprof...\WksPatch[1].exe

Virus Name: W32 Welchia.gen

Action Taken, Unable to repair this file.


When I click "ok"



It display

Access to the file was denied.




Should I have any concerns?


Or is this just a bug with Norton and Windows XP?



Thanks.


Bun Mui

 

[°Mike°]

No, it's not a bug.

http://www.symantec.com/avcenter/venc/data/w32.welchia.gen.html

Is this a bug or what?

Even I updated with latest anti-virus program. I can't get rid of it.

This message is what it displayed on Norton Antivirus porgram.

I have my computer auto - protect enabled ever since bought from the store.

Yet this is what it suddenly displayed while I was online?
Where did it come from and how could I get rid of it?

I didn't click any attachments on e-mails or anything.


This is what was displayed.

Virus Alert

Norton Antivirus has detected a virus on your computer.

Object Name:

C:\WINDOWS\system32\config\systemprof...\WksPatch[1].exe

Virus Name: W32 Welchia.gen

Action Taken, Unable to repair this file.


When I click "ok"



It display

Access to the file was denied.




Should I have any concerns?


Or is this just a bug with Norton and Windows XP?



Thanks.


Bun Mui

 

[Beauregard T. Shagnasty]

Quoth the raven named Bun Mui:

I didn't click any attachments on e-mails or anything.

Do you have a firewall?

Welchia spreads from computer to computer by pinging for unprotected
computers in the same/similar IP netblock. If you are not using a
firewall, you could get yourself reinfected in minutes.

 

[slumpy]

Voicing an opinion as worthless as a wino at a wedding, Beauregard T.
Shagnasty postulated...

Quoth the raven named Bun Mui:


Do you have a firewall?

Welchia spreads from computer to computer by pinging for unprotected
computers in the same/similar IP netblock. If you are not using a
firewall, you could get yourself reinfected in minutes.

Encrypted attachments cause piles.

 

[reid decker]

Try to get KASPERSKY.

 

[Buddy B buddyb]

If you haven`t activated it, it probably wound up in the System Restore folder where
my copy did, along with nachi(?).
There may be better ways to get rid of it, but I turned off System Restore, rebooted,
used my AV pgms to check that all was ok, and turned on system restore again,
rebooted.
That is when I learned that I should have installed my firewall and gotten all of the
critical updates before going online with my new computer.
Hope this helps.
Success.
Regards Buddy B

 

[Bun Mui]

No, it's not a bug.

http://www.symantec.com/avcenter/venc/data/w32.welchia.gen.html

Thanks.

Ok the problem is my Norton antivirus subscription just expired.
What should I do? I think last virus defintion was 3/28/04 .

I saw that website above.
I just wanted to get rid of the worm above.

Do I need to get delete of all my restore points when I disable restore?
Since many of the restore points were dates before I got infected.
Can't I just restore to earlier date before I knew I was infected?
That is what restore is for isn't it?

What is your advice?

I have Mcaffee Office 2000 Anit-virus program.
Should I install that instead? Do I need to pay a subscription fee for that
too every year?

What should I do if I wish to get rid of the worm above and
install Mcaffee instead? Should I keep my Norton Antivirus?
Do I have to uninstall Norton anti-virus before I install
Mcaffee or can I use both anti-virus programs?

Thanks.

Bun Mui