Welchia worm

[Curtis]

I was downloading updates for Windows XP when Norton
Antivirus popped up and said I had the Welchia worm virus
in Windows\system32\wins\Dllhost.EXE file. Norton cannot
quarantine, fix, or delete this virus. I cannot delete
the dllhost.exe file either. How can this be fixed?

 

[Dawn]

Hi Curtis:

You will find the removal tool at:

http://securityresponse.symantec.com/avcenter/venc/data/w3
2.welchia.worm.removal.tool.html

Good luck!

 

[Larry Samuels MS-MVP XP \(Shell/User\)]

That is the so-called "good worm" which has several names:

Nachi, and Welchia:

http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html
McAfee Stinger will remove this worm
http://vil.nai.com/vil/stinger/


--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone -