-=PCTechTalk=- Re: www.Nachi removal tool

  • From: "DH (Rick) Holmes" <hayvan@xxxxxxxxxx>
  • To: pctechtalk@xxxxxxxxxxxxx
  • Date: Sat, 27 Dec 2003 13:08:16 -1200

You seem to have the same symptoms that I had. I tended to put the blame 
on the installation of WinXP.  The 36 infections that Panda cleared did 
not include cleaning nachi. AVG couldn't find it, and almost immediately 
after a search was completed (with AVG) up would come a virus warning 
with the instruction to run AVG!  In turn this did nothing. And a pal of 
mine here checked the virus list he has, (mcAfee I think) and it wasn't 
to be found there either. So, it is a difficult one.

Good luck.  Avoid the reformat if you can, I am still hours away from 
returning to my previous state.
Rick H

milady wrote:

>Thanks..I will see IF I can get that monster to deal with these sites. I
>NEED to run about 15 Microsoft updates but I can't even get the page up.. I
>don't know if it's something to do with this darn pop up about what windows
>can't open or what. I MAYYYY end up having to reformat..grrrrr. but not till
>I have tried this removal thingy --I DID get panda online to download AND
>run so that was an improvemtn--nothing showed up THAT way-- but too much
>else won't open. Sighhhh.  I did  install cleanup on the system and that
>dumped tones of stuff. AND scanned it and did defrag. I think I need to do a
>spybot.. it's still not loading certain web sites and it's SLOW..
>----- Original Message ----- 
>From: "cris" <cris@xxxxxxxxxxxxxxxx>
>To: <pctechtalk@xxxxxxxxxxxxx>
>Sent: Friday, December 26, 2003 1:50 PM
>Subject: -=PCTechTalk=- Re: www.Nachi removal tool
>
>
>  
>
>>http://vil.nai.com/vil/content/v_100559.htm
>>says patch available from microsoft:
>>http://www.sophos.com/virusinfo/analyses/w32nachia.html
>>
>>http://www.ravantivirus.com/virus/showvirus.php?v=199
>>
>>removal tool:
>>
>>    
>>
>http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html
>  
>
>>http://www.norman.com/virus_info/w32_nachi_a.shtml
>>
>>
>>http://us.mcafee.com/virusInfo/default.asp?id=nachi
>>
>>http://www.microsoft.com/security/antivirus/nachi.asp
>>
>>
>>----- Original Message ----- 
>>From: DH (Rick) Holmes
>>To: pctechtalk@xxxxxxxxxxxxx
>>Sent: Saturday, December 27, 2003 5:06 PM
>>Subject: -=PCTechTalk=- Re: www.Nachi removal tool
>>
>>
>>There is a lot of stuff on <microsoft.com> under the blaster subject,
>>and nachi is supposed to be one of blasters progeny.  I got rid of mine
>>with a re-format, because it coincided with my installation of WinXP.
>>Once this was up and running, as I have said before, Panda on line scan
>>came up with 36 infections!!!
>>
>>I have not found any reference to nachi in any virus lists!  I thought
>>maybe it was a spoof thing, something else being misreported, but now
>>you have it...............?
>>
>>HTH
>>Rick H
>>
>>milady wrote:
>>
>>    
>>
>>>I am trying to find the removal tool for this worm..
>>>I ran Panda AFTER I ran AVG..AVG says it's still there and can't be
>>>removed.--even tho I quarenteened it??? It shows up in AVG as
>>>wins/dllhost.exe..it doesn't show up on Pandaactive scan.. driving me
>>>      
>>>
>nuts.
>  
>
>>>It's on another computer that still won't let me get into certain web
>>>      
>>>
>sites
>  
>
>>>and I can't donwload any Micro updates for windows. The page won't open.
>>>
>>>It also has a " windows can't open this file----" I ran a copy of
>>>      
>>>
>Symantic
>  
>
>>>for Blaster and it came up negative so I am still lost with THAT.
>>>I managed to scan and defrage the system. AND cleaned it for unnecessary
>>>files.
>>>
>>> *~<*> Mary Lou<*>~*
>>>                /\ - /\
>>>           >> ^ ,, ^ <<
>>>            --0-----0--
>>>   kg6ocz@xxxxxxxxxxxxx
>>>
>>>
>>>To unsub or change your email settings:
>>>//www.freelists.org/webpage/pctechtalk
>>>
>>>To access our Archives:
>>>http://groups.yahoo.com/group/PCTechTalk/messages/
>>>//www.freelists.org/archives/pctechtalk/
>>>
>>>For more info:
>>>//www.freelists.org/cgi-bin/list?list_id=pctechtalk
>>>
>>>
>>>
>>>
>>>
>>>      
>>>
>>To unsub or change your email settings:
>>//www.freelists.org/webpage/pctechtalk
>>
>>To access our Archives:
>>http://groups.yahoo.com/group/PCTechTalk/messages/
>>//www.freelists.org/archives/pctechtalk/
>>
>>For more info:
>>//www.freelists.org/cgi-bin/list?list_id=pctechtalk
>>
>>
>>To unsub or change your email settings:
>>//www.freelists.org/webpage/pctechtalk
>>
>>To access our Archives:
>>http://groups.yahoo.com/group/PCTechTalk/messages/
>>//www.freelists.org/archives/pctechtalk/
>>
>>For more info:
>>//www.freelists.org/cgi-bin/list?list_id=pctechtalk
>>
>>
>>    
>>
>
>
>To unsub or change your email settings:
>//www.freelists.org/webpage/pctechtalk
>
>To access our Archives:
>http://groups.yahoo.com/group/PCTechTalk/messages/
>//www.freelists.org/archives/pctechtalk/
>
>For more info:
>//www.freelists.org/cgi-bin/list?list_id=pctechtalk
>
>
>
>  
>

To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk

To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/

For more info:
//www.freelists.org/cgi-bin/list?list_id=pctechtalk

Other related posts: