Page 1 of 2 12 LastLast
Results 1 to 25 of 41

Thread: ! (Welchia)

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Will It Blend? :) Kiko's Avatar
    Join Date: Jun:2002
    Location:
    Posts: 606

    ! (Welchia)

    , . (Welchia), .


    (Welchia)!

    http://www.symantec.com/avcenter/FixWelch.exe

    :

    The service "RpcPatch" is viral. It is deleted.

    The service "RpcTftpd" is viral. It is deleted.

    The process "DLLHOST.EXE" is viral. It is terminated.

    The tool has deleted the viral file "C:\WINNT\system32\wins\DLLHOST.EXE" .

    The file "C:\WINNT\System32\wins\svchost.exe" is deleted.

    W32.Welchia.Worm has been successfully removed
    from your computer!

    Here is the report:

    The total number of the scanned files: 50363
    The number of deleted files: 2
    The number of repaired files: 0
    The number of viral processes terminated: 1
    The number of viral services deleted: 2
    The number of registry entries fixed: 0
    Last edited by Kiko; 20th August 2003 at 17:21.

  2. #2
    a.k.a. Nerd NerdiX's Avatar
    Join Date: Jul:2003
    Location:
    Posts: 2,448

    Not Affected Software:
    Microsoft Windows Server 2003

    ...

  3. #3
    See you in court! Pentagramm's Avatar
    Join Date: Dec:2002
    Location: Gent University, Belgium
    Posts: 451
    , :
    : Lex.BG <>: Lex.BG users <>: VIRUS WARRNING: Zdraweite,

    Lex.bg Wi uwedomqwa za razprostranenieto po elektronna poshta na virus s ime
    Sobig.F, koito zarazqwa sistemi s instaliran Windows 9.x/ME/NT/2000/XP.

    Virusyt se razprostranqwa po e-mail pod formata na prikachen file. Pismata
    koito se poluchavat imat subject ot vida: "RE: <suobshtenie> ", kato
    "<suobshtenie>" moze da e proizvolna posledowatelnost ot dumi, ili ot vida
    "your acount <bukvi>",obiknoveno 8 malki latinski simvola.

    Za da ste absolutno sigurni 4e Sobig.F ne e dostignal do Washiq komputyr,
    prowerete dali ste polu4ili e-mail s goreposo4enite harakteristiki.
    Ako eventualno ste polu4ili podobno pismo NE
    aktiwiraite prika4eniq file, iztriite syob6tenieto i
    se uwerete, 4e ste go premahnali i ot papkata Deleted items.
    Poveche informaciq za na4inite, po koito mojete da se predpazite ot silnata
    wirusna ataka i za towa kak da po4istite virusa, mojete da namerite na adres:
    http://www.computel.bg/docs.php?list=virus.


    Ekipyt na Lex.bg
    -------
    . , ... ... ...
    "Do you understand life, Master?"
    "Of course not. I know a few things. I love learning. I have tried to understand this world. I listen to everyone. I put to one side what seems doubtful and I am cautious about the rest."
    Gore Vidal
    Creation

  4. #4
    Registered User SeT's Avatar
    Join Date: Aug:2002
    Location: Sofia
    Posts: 6,865
    Worm Blaster ,
    2004

  5. #5
    HARDWAREBG MOD MACHINE alex_matrix's Avatar
    Join Date: Sep:2002
    Location: >>SOFIA<<
    Posts: 1,045
    ,

    ....



  6. #6

  7. #7
    Will It Blend? :) Kiko's Avatar
    Join Date: Jun:2002
    Location:
    Posts: 606
    Originally posted by SeT

    Removal Tool
    http://securityresponse.symantec.com...oval.tool.html
    .

  8. #8
    Registered User SeT's Avatar
    Join Date: Aug:2002
    Location: Sofia
    Posts: 6,865
    e

  9. #9
    ... Ba4o Kiro's Avatar
    Join Date: May:2001
    Location:
    Posts: 5,561
    , "-" "' "! " " ( I-net "KB823980" -) , " " ?!
    - .
    4K Xtreme GraphiX|Intel Intel Core i7 920@4000MHz|ASUS P6T Deluxe V2|3x2GB Apacer 1333@1600MHz DDR3|1x74GB WD Raptor 10Krpm/1x640GB WD 7.2Krpm|ASUS GeForce 8800GTX 768MB GDDR3|Chieftec DG-01/Chieftec CFT-1200G-DF 1.2KW|SB X-Fi Platinium|LiteON 16H5S

  10. #10
    Wall-e delian's Avatar
    Join Date: May:2003
    Location: ::1
    Posts: 4,723
    , . Wireless-a - . .

  11. #11
    Will It Blend? :) Kiko's Avatar
    Join Date: Jun:2002
    Location:
    Posts: 606
    Originally posted by delian
    , . Wireless-a - . .
    Wireless-a!
    .

  12. #12
    Registered User Svetlix's Avatar
    Join Date: Mar:2003
    Location:
    Posts: 3,260

    , .
    - !

  13. #13
    Registered User subn3t's Avatar
    Join Date: Apr:2003
    Location: 127.0.0.1
    Posts: 1,143

    Re:

    Originally posted by Nerd
    Not Affected Software:
    Microsoft Windows Server 2003

    ...
    *NIX ?
    .

  14. #14
    Registered User
    Join Date: Mar:2003
    Location:
    Posts: 200
    Svetlix> . DOS. - . , , , FTP ( Floppy Transfer Protocol) , "" , "" Win*

    Peace
    Bus station is the place where bus stops. Train station is the place where train stops. n my desk I have WORKSTATION...

  15. #15
    Registered User Svetlix's Avatar
    Join Date: Mar:2003
    Location:
    Posts: 3,260
    DOS Windows . . PEACE!
    - !

  16. #16
    Registered User tomcat's Avatar
    Join Date: Jun:2003
    Location: Bourgas
    Posts: 97

    Re: ! (Welchia)


    "C:\WINNT\System32\wins\svchost.exe"
    ?
    Task manager- .
    (Welchia) ? .

  17. #17
    Wall-e delian's Avatar
    Join Date: May:2003
    Location: ::1
    Posts: 4,723
    -. , .

  18. #18
    Registered User tomcat's Avatar
    Join Date: Jun:2003
    Location: Bourgas
    Posts: 97
    Originally posted by delian
    -. , .

    , . ... ... NortonAntivirus Corporate Edition - Update-, ZoneAlarmPro - Windows 2003 Server.

  19. #19
    Wall-e delian's Avatar
    Join Date: May:2003
    Location: ::1
    Posts: 4,723
    . .
    Attached Files

  20. #20
    Registered User tomcat's Avatar
    Join Date: Jun:2003
    Location: Bourgas
    Posts: 97
    Stinger. .log :
    ~~~~~~~~~~~~~~~~~
    Scan initiated on Fri Aug 29 22:57:42 2003
    Number of clean files: 394 ( C

    Scan initiated on Fri Aug 29 22:58:13 2003
    Number of clean files: 40650 ( D: E: F
    ~~~~~~~~~~~~~~~~~
    ,

    - ( C:, ). ...

  21. #21
    Wall-e delian's Avatar
    Join Date: May:2003
    Location: ::1
    Posts: 4,723
    , , , . -, , ..

  22. #22
    Registered User tomcat's Avatar
    Join Date: Jun:2003
    Location: Bourgas
    Posts: 97
    OK
    Thanks

    P.S.
    Windows Server 2003 services ... . svchost.exe . . Task manager-. . 6-7 , . , . , offtopic .
    Last edited by tomcat; 29th August 2003 at 10:09.

  23. #23
    Pesho's Avatar
    Join Date: Nov:2001
    Location: Sofia
    Posts: 5,169
    svchost.exe system32 , system32\wins\, . , ( )

  24. #24
    Registered User tomcat's Avatar
    Join Date: Jun:2003
    Location: Bourgas
    Posts: 97
    . , win- .

  25. #25
    Registered User ^Kj^TRN's Avatar
    Join Date: Sep:2003
    Posts: 43
    2003 6 Symantec Antivirus Corporate Server AutoUpdate ;-)
    The Real Net - The Real Internet Provider
    http://www.trnnet.tk

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Copyright © 1999-2011 . .
iskamPC.com | mobility.BG | Bloody's Techblog | | 3D Vision Blog |