W32.Welchia.Worm

  • Thread starter Thread starter Bob
  • Start date Start date
B

Bob

I have two problems:
1.) The info listed for the Welchia Worm says that it "makes a copy of
%sustem%\Dllcache\Tftpd.exe as %System%\Wins\svchost.exe". I followed the
instructions, removed the virus and installed the patch from Microsoft and
still have "svchost.exe" in the computer in two locations:C:\1386 and
C:\Windows\System 32. There are several references to svchost.ext in the
registry as well.
a.) What does this file do?
b.) Should it be removed?

2.) The computer is recent and since I got it I keep getting a popup window
at odd times labeled "Message Service". The latest one says its a "message
alert from Alert Service to you on 8/25/2003" at the current time telling me
to go to WWW.ByeByeads.com to get rid of these annoying popup. The popups
are not always from the same source.
a.) Is this Message Service" part of the xp system?
b.) How to identify the source and eliminate it?

Thank you

Bob
 
Computer management >> Services and applications >> services >> messenger

right click >> properties >> stop the service and then set for disable at
startup

None of which does you any good if a proper firewall is not installed since
a virus will get you.
 
Back
Top