Do I have the w32.welchia.worm?

  • Thread starter Thread starter Harry
  • Start date Start date
H

Harry

Hi,

Last night I kept getting a message that said I have a worm
w32.welchia. So I ran Norton AV 2004 and it did detect an infected
file and said it fixed it. I ran it again and the system was clean.

However the message popped up again after that.

So I downloaded a program called FixWelch and when I ran that it said
I did not have it in my system.

This morning the message showed up again.

So I ran Norton AV again. No virus detected.

I ran Ad_Aware and deleted 3 entries.

The computer seems to run perfectly normal and the only thing that is
wrong is this message that pops up now and then.

Any ideas, suggestions, cures, etc. appreciated.

Thanks. Harry
 
Hi,

Last night I kept getting a message that said I have a worm
w32.welchia. So I ran Norton AV 2004 and it did detect an infected
file and said it fixed it. I ran it again and the system was clean.

However the message popped up again after that.

So I downloaded a program called FixWelch and when I ran that it said
I did not have it in my system.

This morning the message showed up again.

So I ran Norton AV again. No virus detected.

I ran Ad_Aware and deleted 3 entries.

The computer seems to run perfectly normal and the only thing that is
wrong is this message that pops up now and then.

Any ideas, suggestions, cures, etc. appreciated.
Click to expand...

Continual reinfection perhaps? Have you patched the various
vulnerabilities?

http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html


Art
http://www.epix.net/~artnpeg
 
On that special day, Harry, ([email protected]) said...
w32.welchia. So I ran Norton AV 2004 and it did detect an infected
file and said it fixed it. I ran it again and the system was clean.
Click to expand...

Weird. Welchia should stop working/spreading/installing after January
1st or so.

http://www.viruslist.com/eng/viruslist.html?id=65727
However the message popped up again after that.
Weird.

So I downloaded a program called FixWelch and when I ran that it said
I did not have it in my system.
Correct.

This morning the message showed up again.
Weird.

So I ran Norton AV again. No virus detected.
Click to expand...

Correct.

Are you sure that this worm is ON your computer, and not trying to come
in from another machine, the owner of which hasn't set the onboard
date/time properly?

I ran Ad_Aware and deleted 3 entries.
Click to expand...

That's nothing got to do with Welchia / Nachi.


Gabriele Neukam

(e-mail address removed)
 
THANKS for the responses. It has suddenly stopped reporting the
message so it appears that you are correct and that it was something
coming from outside and not on my computer.

Thanks again, Harry
 
Back
Top