General discussion

Locked

Welchia Worm

By mkabus ·
The welchia worm has hit our network via one of our laptop users. I have been tracing down machines with our fluke products for 2 days but I have still not stopped this thing from being passed around our network. Most of our machines are patched and we have a team of people patching the rest as I find them.I have configured our PIX to deny any traffic causing this virus to spread but I was wondering if there is any fool proof network tools to trace this thing down on our network and eliminate it once and for all. Any help or sugestions would be greatly appreciated..
Thanks, Mark

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by jaboy78 In reply to Welchia Worm

go to www.symantec.com to download the removal tools for it...

it will 100% clean the viruses in your network.

But is a must to run on all ur pc including ur server.

Collapse -

by Curacao_Dejavu In reply to Welchia Worm

I don't know pix but most if not all firewalls have logging capabilities built in.
so if you enable the logging would find the ip of the machines generating the traffic.
if you have a pc you can install netprobe 0.4 (free) (it has to go into the internet hub.) and you would be able to see all traffic on the network.

Leopold

Back to Windows Forum
2 total posts (Page 1 of 1)  

Related Discussions

Related Forums