nachi(welch)

[S.L.NARASIMHAM.]

my antivirus avg6.0 showed that the system is infected with nachi worm. it
is located as infecting c:\windows\system32\wins\dllhost.exe and when i look
at running processes svchost is running in 5 instances.
the antivirus program says it cannot heal the file and recommends moving it
to the virus vault. when i try to do it i find that the system says it
cannot move the file.
downloaded fixwelch.exe from symantec and it advises me to run avg to remove
the virus and in the end assures me that the computer is clean except for
this instance.
now what shall i do?
please help.
S.L.Narasimham

[Thorsten Matzner]

"S.L.NARASIMHAM." > wrote:

>my antivirus avg6.0 showed that the system is infected with nachi worm. it
>is located as infecting c:\windows\system32\wins\dllhost.exe and when i look
>at running processes svchost is running in 5 instances.

The latter does not indicate a problem. The DLLHOST.EXE is no standard
Windows file, so I bet it is part of the virus.
Start to the Safe Mode and see if you can delete the file from here.
"A Description of the Safe Boot Mode Options in Windows XP"
(http://support.microsoft.com/?kbid=315222)

--
(tm)

[S.L.NARASIMHAM.]

you are so right! that was the virus. after downloading another patch from
avg site i ran the antivirus again and the system for NOW is clean. thanks
for the info. S.L.Narasimham.
"Thorsten Matzner" > wrote in message
...
> "S.L.NARASIMHAM." > wrote:
>
> >my antivirus avg6.0 showed that the system is infected with nachi worm.
it
> >is located as infecting c:\windows\system32\wins\dllhost.exe and when i
look
> >at running processes svchost is running in 5 instances.
>
> The latter does not indicate a problem. The DLLHOST.EXE is no standard
> Windows file, so I bet it is part of the virus.
> Start to the Safe Mode and see if you can delete the file from here.
> "A Description of the Safe Boot Mode Options in Windows XP"
> (http://support.microsoft.com/?kbid=315222)
>
> --
> (tm)

[Thorsten Matzner]

"S.L.NARASIMHAM." > wrote:

>you are so right!

You are welcome.

--
(tm)