General discussion

Locked

Virus WIN32/HLLW.Nachi

By bobsuth ·
PC using Windows XP infected with above virus. Virus checker (RAV) finds virus but cannot remove. when I log in as administrator, eveything freezes, can only log in as guest with no admin authority. How can i get round this + remove this virus + get access to this PC agian. Help please!

This conversation is currently closed to new comments.

4 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by Jennifer.Gardner In reply to Virus WIN32/HLLW.Nachi

McAfee's Stinger program includes this virus. Download at http://vil.nai.com/vil/stinger/ , put it on a floppy, run in Safe Mode.

Collapse -

by Joseph Moore In reply to Virus WIN32/HLLW.Nachi

Symantec calls the Nachi virus "Welchia", and they made a Welchia disinfection tool. Go here to get it:

http://www.sarc.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html
(please remove any spaces)

good luck

Collapse -

by tazdevil34 In reply to Virus WIN32/HLLW.Nachi

Both of the above ideas are OK. Once you have these tools and removed the worm. Then you will want to login as Admin and then Disable system restore and run the tools again. XP's 'restore' files get infected and if you don't disable this function you will never really get rid of this worm. Once you have removed it totally don't forget to go back and turn on system restore again. I would suggest that you run either of these in Safe Mode for best results.

Collapse -

by computersmith1 In reply to Virus WIN32/HLLW.Nachi

Because this virus disables firewall and security services and therefore leaves your computer open to opertunistic secondary infections, and Once you can access the internet, you should immediately visit http://www.pandasoftware/activescan and enter click on the "scan my computer" button. Then enter your email address and state where you reside when prompted, then the free online scanner will download and run locally on your machine. There are also free removal tools for the more nasty worms that cannot be auto-disinfected by activescan. Once you are certified clean, reinstall your antivirus and other security software (I would recommend downloading the Panda Antivirus because it updates daily and it really works). Then you can re-enable System Restore.

Back to Desktop Forum
4 total posts (Page 1 of 1)  

Related Discussions

Related Forums