Virus WIN32/HLLW.Nachi

McAfee's Stinger program includes this virus. Download at http://vil.nai.com/vil/stinger/ , put it on a floppy, run in Safe Mode.

Symantec calls the Nachi virus "Welchia", and they made a Welchia disinfection tool. Go here to get it:

http://www.sarc.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html
(please remove any spaces)

good luck

Both of the above ideas are OK. Once you have these tools and removed the worm. Then you will want to login as Admin and then Disable system restore and run the tools again. XP's 'restore' files get infected and if you don't disable this function you will never really get rid of this worm. Once you have removed it totally don't forget to go back and turn on system restore again. I would suggest that you run either of these in Safe Mode for best results.

Because this virus disables firewall and security services and therefore leaves your computer open to opertunistic secondary infections, and Once you can access the internet, you should immediately visit http://www.pandasoftware/activescan and enter click on the "scan my computer" button. Then enter your email address and state where you reside when prompted, then the free online scanner will download and run locally on your machine. There are also free removal tools for the more nasty worms that cannot be auto-disinfected by activescan. Once you are certified clean, reinstall your antivirus and other security software (I would recommend downloading the Panda Antivirus because it updates daily and it really works). Then you can re-enable System Restore.