General discussion

Locked

welchia virus reinfection

By destco ·
Hi,

My home pc is infected with welchia virus i have cleaned it using norton virus removal tool. But unfortunatly this virus is coming back again and again. Is there any permanent solution or i have to format my hard disk.

Can any one help me out.

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by LMon In reply to welchia virus reinfection

Here are some sites that will should help you remove the virus the virus.

1)Symantec's Instructions:
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

2)Berkley Instructions:
http://groups.haas.berkeley.edu/HCS/howdoi/fix_welchia.pdf

Remove any spaces from these links:

Collapse -

by pierrejamme In reply to welchia virus reinfection

You didn't mention the OS version, if you have ME or XP then you need to turn of the Restore Function because it will re-infect every time you reboot.
Check out this site for instructions:
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

Collapse -

by jimmy In reply to welchia virus reinfection

Assuming you have Microsoft XP turn off System restore by right clicking:

Right-click My Computer, and then click Properties.
Click the System Restore tab.
Check the "Turn off System Restore" or "Turn off System Restore on all drives" check box and click Apply.

The following message appears:
As noted in the message, this will delete all existing restore points. Click Yes to do this.
Click OK.

Reboot the PC.
Run the Welscha Removal Tool to remove virus.
Reboot the PC

Restart the computer
Right-click My Computer, and then click Properties.
Click the System Restore tab.
Uncheck the "Turn off System Restore" or "Turn off System Restore on all drives" check box.
Click Apply, and then click OK.

Collapse -

by jimmy In reply to

PS

Almost forgot to mention you must be logged into the PC as a user with Admin privellages

Collapse -

by Joseph Moore In reply to welchia virus reinfection

I do not think it has been mentioned yet, so I will ask.
Did you apply the MS03-039 patch to your Windows machine? You need this patch to PREVENT any re-infection by Blaster and/or its variants (like Welchia). Without the patch, then they will just keep infecting you again and again. Antivirus software cannot prevent infection on an unpatched machine.
Go here for info on the patch, along with links to download it:
http://www.microsoft.com/security/incident/blast.asp
(please remove any spaces)

hope this helps

Back to Windows Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums