nachi(welch)

  • Thread starter Thread starter S.L.NARASIMHAM.
  • Start date Start date
S

S.L.NARASIMHAM.

my antivirus avg6.0 showed that the system is infected with nachi worm. it
is located as infecting c:\windows\system32\wins\dllhost.exe and when i look
at running processes svchost is running in 5 instances.
the antivirus program says it cannot heal the file and recommends moving it
to the virus vault. when i try to do it i find that the system says it
cannot move the file.
downloaded fixwelch.exe from symantec and it advises me to run avg to remove
the virus and in the end assures me that the computer is clean except for
this instance.
now what shall i do?
please help.
S.L.Narasimham
 
S.L.NARASIMHAM. said:
my antivirus avg6.0 showed that the system is infected with nachi worm. it
is located as infecting c:\windows\system32\wins\dllhost.exe and when i look
at running processes svchost is running in 5 instances.
Click to expand...

The latter does not indicate a problem. The DLLHOST.EXE is no standard
Windows file, so I bet it is part of the virus.
Start to the Safe Mode and see if you can delete the file from here.
"A Description of the Safe Boot Mode Options in Windows XP"
(http://support.microsoft.com/?kbid=315222)
 
you are so right! that was the virus. after downloading another patch from
avg site i ran the antivirus again and the system for NOW is clean. thanks
for the info. S.L.Narasimham.
 
Back
Top