i would like to know how i get the virus, w32.welchia.worm off my computer and what type is it?

Answer 1

Favorite Answer

The Welchia (MSBLAST.D or Nachi) worm infects machines via network connections. It can attack entire networks of computers or one single computer connected to the Internet. Similar to the original MSBlast worm it exploits a known windows vulnerability that is easily patched, however few systems seem to have this patch installed. It attacks Windows 2000 and Windows XP machines and exploits the DCOM RPC Vulnerablity. It uses TFTP (Trivial File Transfer Protocol) to download its files into a system. It also exploits one more vulnerability known as the WebDAV exploit to travel from system to system.

Ironically, this worm attempts to patch the RPC DCOM Buffer Overflow. It first checks for the running Windows version and then downloads a patch from Microsoft. In essence this worm patches your computer against the MSBlast.A worm. When the current system year is 2004, the worm removes itself from the system.

http://www.pchell.com/virus/welchia.shtml

Answer 2

Hi there,

Here's some detailed information on the Welchia Worm infection:

http://virusinfo.prevx.com/viruscenter.asp?returnp...

The best and easiest way to remove this is by installing the Free Trial of Prevx1. This will scan your PC and remove this and any other infections free of charge.

Source(s): http://www.prevx.com

Answer 3

You have to download "Avg 7.5 version" from grisoft.com. Then download the latest updates upto december 20. If you don't have enough money to spend on a legal copy try with free edtion and type following license number in the free edition.

" License users: 100

License number:70-THXMV1-PL-C21-SCNCK-AXD-361Q"

Answer 4

I can give a few links that offer free virus and spyware removers...! Norton, AVG , Avast are free antivirus software. Ad-aware, Ewido are free spyware removers. You can download free softwares at

http://fixit.in/antivirus.html and http://fixit.in/spywareremover.html

Source(s): http://fixit.in/antivirus.html and http://fixit.in/spywareremover.html

Answer 5

For information about it, go here: http://www.wsu.edu/itsec/alert/20030822/w32Welchia...

On how to delete it, go here:http://www.symantec.com/security_response/writeup....

Source(s): http://www.symantec.com/security_response/writeup.... http://www.wsu.edu/itsec/alert/20030822/w32Welchia...

Answer 6

IF YOU WAN'T TO REMOVE THIS RISKS JUST DOWNLOAD SYMANTEC ANTIVIRUS/IT IS GOOD

GOOD LUCK