You seem to have the same symptoms that I had. I tended to put the blame on the installation of WinXP. The 36 infections that Panda cleared did not include cleaning nachi. AVG couldn't find it, and almost immediately after a search was completed (with AVG) up would come a virus warning with the instruction to run AVG! In turn this did nothing. And a pal of mine here checked the virus list he has, (mcAfee I think) and it wasn't to be found there either. So, it is a difficult one. Good luck. Avoid the reformat if you can, I am still hours away from returning to my previous state. Rick H milady wrote: >Thanks..I will see IF I can get that monster to deal with these sites. I >NEED to run about 15 Microsoft updates but I can't even get the page up.. I >don't know if it's something to do with this darn pop up about what windows >can't open or what. I MAYYYY end up having to reformat..grrrrr. but not till >I have tried this removal thingy --I DID get panda online to download AND >run so that was an improvemtn--nothing showed up THAT way-- but too much >else won't open. Sighhhh. I did install cleanup on the system and that >dumped tones of stuff. AND scanned it and did defrag. I think I need to do a >spybot.. it's still not loading certain web sites and it's SLOW.. >----- Original Message ----- >From: "cris" <cris@xxxxxxxxxxxxxxxx> >To: <pctechtalk@xxxxxxxxxxxxx> >Sent: Friday, December 26, 2003 1:50 PM >Subject: -=PCTechTalk=- Re: www.Nachi removal tool > > > > >>http://vil.nai.com/vil/content/v_100559.htm >>says patch available from microsoft: >>http://www.sophos.com/virusinfo/analyses/w32nachia.html >> >>http://www.ravantivirus.com/virus/showvirus.php?v=199 >> >>removal tool: >> >> >> >http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html > > >>http://www.norman.com/virus_info/w32_nachi_a.shtml >> >> >>http://us.mcafee.com/virusInfo/default.asp?id=nachi >> >>http://www.microsoft.com/security/antivirus/nachi.asp >> >> >>----- Original Message ----- >>From: DH (Rick) Holmes >>To: pctechtalk@xxxxxxxxxxxxx >>Sent: Saturday, December 27, 2003 5:06 PM >>Subject: -=PCTechTalk=- Re: www.Nachi removal tool >> >> >>There is a lot of stuff on <microsoft.com> under the blaster subject, >>and nachi is supposed to be one of blasters progeny. I got rid of mine >>with a re-format, because it coincided with my installation of WinXP. >>Once this was up and running, as I have said before, Panda on line scan >>came up with 36 infections!!! >> >>I have not found any reference to nachi in any virus lists! I thought >>maybe it was a spoof thing, something else being misreported, but now >>you have it...............? >> >>HTH >>Rick H >> >>milady wrote: >> >> >> >>>I am trying to find the removal tool for this worm.. >>>I ran Panda AFTER I ran AVG..AVG says it's still there and can't be >>>removed.--even tho I quarenteened it??? It shows up in AVG as >>>wins/dllhost.exe..it doesn't show up on Pandaactive scan.. driving me >>> >>> >nuts. > > >>>It's on another computer that still won't let me get into certain web >>> >>> >sites > > >>>and I can't donwload any Micro updates for windows. The page won't open. >>> >>>It also has a " windows can't open this file----" I ran a copy of >>> >>> >Symantic > > >>>for Blaster and it came up negative so I am still lost with THAT. >>>I managed to scan and defrage the system. AND cleaned it for unnecessary >>>files. >>> >>> *~<*> Mary Lou<*>~* >>> /\ - /\ >>> >> ^ ,, ^ << >>> --0-----0-- >>> kg6ocz@xxxxxxxxxxxxx >>> >>> >>>To unsub or change your email settings: >>>//www.freelists.org/webpage/pctechtalk >>> >>>To access our Archives: >>>http://groups.yahoo.com/group/PCTechTalk/messages/ >>>//www.freelists.org/archives/pctechtalk/ >>> >>>For more info: >>>//www.freelists.org/cgi-bin/list?list_id=pctechtalk >>> >>> >>> >>> >>> >>> >>> >>To unsub or change your email settings: >>//www.freelists.org/webpage/pctechtalk >> >>To access our Archives: >>http://groups.yahoo.com/group/PCTechTalk/messages/ >>//www.freelists.org/archives/pctechtalk/ >> >>For more info: >>//www.freelists.org/cgi-bin/list?list_id=pctechtalk >> >> >>To unsub or change your email settings: >>//www.freelists.org/webpage/pctechtalk >> >>To access our Archives: >>http://groups.yahoo.com/group/PCTechTalk/messages/ >>//www.freelists.org/archives/pctechtalk/ >> >>For more info: >>//www.freelists.org/cgi-bin/list?list_id=pctechtalk >> >> >> >> > > >To unsub or change your email settings: >//www.freelists.org/webpage/pctechtalk > >To access our Archives: >http://groups.yahoo.com/group/PCTechTalk/messages/ >//www.freelists.org/archives/pctechtalk/ > >For more info: >//www.freelists.org/cgi-bin/list?list_id=pctechtalk > > > > > To unsub or change your email settings: //www.freelists.org/webpage/pctechtalk To access our Archives: http://groups.yahoo.com/group/PCTechTalk/messages/ //www.freelists.org/archives/pctechtalk/ For more info: //www.freelists.org/cgi-bin/list?list_id=pctechtalk