W32.welchia.worm

[Neal]

I have the worm! I used Norton w/current updates to find
it and downloaded and ran their FixWelch.exe file -> No
luck.
I downloaded and tried to run MS
815021_WXP_SP2_x86_EMU.exe, but that just hung up and
would not complete. I looked for the registry keys stated
in Norton removal procedures, they are not there? I
deleted the SCVHOST.exe file as in the instructions.
Now I have an XP Home system that will no longer function
properly. I have lost my start bar and I cannot execute
the MS fix. I get the following error:

"Setup could not verify the integrity of the file
Update.inf. Make sure the cryptografic service is running
on the computer" -->> ????

Can I re-Extract the good svchost.exe file from the CD? If
so HOW? I have looked for an extract, but cannot locate it.

HELp!!

Thanks -In advance.

 

[Neal]

I found the expand executeable and expanded the
svchost.ex_ file from the I386 directory. So now I have
that fixed and I have aStart bar to work with. I am
running the MS fix for the worm now and it just finished
and all seems to be okay.
Time to hook it back into the network and see.

Neal.

 

[Jupiter Jones [MVP]]

Neal;
Do not forget to enable/install a firewall:
http://support.microsoft.com/?kbid=283673

Run an updated virus scan.