w32welchia.worm

  • Thread starter Thread starter carol
  • Start date Start date
C

carol

HELP! MY NORTON ANTIVIRUS SAYS IT HAS DETECTED A VIRUS.
C:WINDOWS\SYSTEM32\WINS\DLLHOST.EXE W32.WELCHIA.WORM
UNABLE TO REPAIR THIS FILE. I HAVE DOWNLOADED ALL
UPDATES BUT DO NOT KNOW HOW TO GET RID OF THIS. IT LOCKS
UP MY COMPUTER AND WON'T LET ME SHUTDOWN UNLESS I UNPLUG
POWER. I LEFT IT ON ALL NIGHT AND IT STILL SAID WINDOWS
SHUTTING DOWN...
 
Carol,

first of all you should repair your registry.
in Run , type regedit ,
go to :

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Find the worm name in the right panel and delete the registry key

(Warning: Before modifying registry , please create a back up of your registry, using File>Export... Failures in registry can render your computer non-functioning)

If you use XP Pro and can not access your registry from the Run, use the attached file, open it and add its information to your registry the worm avoid you accessing your computers registry.(Only and only use it if you have problems accessing registry)

After doing that, boot, log on to XP again , Turn your firewall on immediately, Turn off system restore in all drives and perform a complete scan with your Norton.
( To turn off system restore right click My Computer>properties>System restore> Turn off system restore in all drives )

Hope you survive

T O M M Y
 
Back
Top