GardenBanter.co.uk

GardenBanter.co.uk (https://www.gardenbanter.co.uk/)
-   United Kingdom (https://www.gardenbanter.co.uk/united-kingdom/)
-   -   WelchiaWorm (https://www.gardenbanter.co.uk/united-kingdom/43088-welchiaworm.html)

pronoun 15-09-2003 10:03 AM

WelchiaWorm
 
Not your gardening variety! Sorry if this is a bit OT, but my new machine
XP Home (not this one 98SE) caught the worm during it's first ever session
online yesterday while updating the Anti Virus Software, and with the
Firewall activated (ICF). I did not have time to Update XP. I pulled the
plug when Norton found the worm--downloaded a removal tool from Symantec,
and now it seems ok-- but I still need to Update tonight. It's difficult to
see what further precautions I could take! I've not yet used email on that
machine.



fmurl 15-09-2003 05:02 PM

WelchiaWorm
 
"pronoun" wrote:

Not your gardening variety! Sorry if this is a bit OT, but my new machine
XP Home (not this one 98SE) caught the worm during it's first ever session
online yesterday while updating the Anti Virus Software, and with the
Firewall activated (ICF). I did not have time to Update XP. I pulled the
plug when Norton found the worm--downloaded a removal tool from Symantec,
and now it seems ok-- but I still need to Update tonight. It's difficult to
see what further precautions I could take! I've not yet used email on that
machine.


Is this NTL by any chance?


--
fmurl

Rich P 15-09-2003 08:34 PM

WelchiaWorm
 
I had the same experience last week.
I was trying to update someone's PC for the first time and it got infected.

I'd firstly take your machine offline and fully scan the system with Norton
and the removal utility they have.
Then connect and try to get to windowsupdate ASAP and find the patch. I
would also try to do a live update of Norton at the same time.

Good luck, I was ok 2nd time I connected and managed to get all 80+ megs of
windows xp patches downloaded without getting infected again.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
GreedyMoose - Online offers, vouchers and coupons for the UK
http://www.greedymoose.co.uk


"pronoun" wrote in message
...
Not your gardening variety! Sorry if this is a bit OT, but my new machine
XP Home (not this one 98SE) caught the worm during it's first ever session
online yesterday while updating the Anti Virus Software, and with the
Firewall activated (ICF). I did not have time to Update XP. I pulled the
plug when Norton found the worm--downloaded a removal tool from Symantec,
and now it seems ok-- but I still need to Update tonight. It's difficult

to
see what further precautions I could take! I've not yet used email on

that
machine.





Alan Gould 15-09-2003 09:03 PM

WelchiaWorm
 
In article , pronoun fearhoward
@fearhoward.plus.com writes
I've not yet used email on that
machine.

Does that also mean that no e-mails have been sent to you on it?
At present I am deleting all e-mails without opening them unless I am
absolutely certain about their source. Today I had another of those
Microsoft Security Division messages and about 15 Failed Mail and
Rejection Notices along with the usual Viagra, erotic, free holiday and
get-rich-quick offers. I even had a now rare Good News mailing. All are
potential virus carriers and are binned unopened, but still they come.

I use Windows XPHome and NAV/Symantec fully updated, but I'm having some
weird functions in my PC and on the Web just lately. According to the
News,13/14 yr. old kids are sending infections out with ease on their
school 'learning' machines. It cannot be long before they find out how
do it via Usenet groups or unopened e-mails. Brave New World!
--
Alan & Joan Gould - North Lincs.

pronoun 15-09-2003 10:33 PM

WelchiaWorm
 

"fmurl" wrote in message
...
"pronoun" wrote:

Not your gardening variety! Sorry if this is a bit OT, but my new

machine
XP Home (not this one 98SE) caught the worm during it's first ever

session
online yesterday while updating the Anti Virus Software, and with the
Firewall activated (ICF). I did not have time to Update XP. I pulled

the
plug when Norton found the worm--downloaded a removal tool from Symantec,
and now it seems ok-- but I still need to Update tonight. It's difficult

to
see what further precautions I could take! I've not yet used email on

that
machine.


Is this NTL by any chance?


--
fmurl


If you mean my ISP it's Plusnet. No emails have been downloaded on the
infected machine--the worm gets in through a vulnerable port. As the
supplied firewall ICF was unable to prevent it: I will install Zone Alarm
before downloading the patches and updates that XP informs me are necessary.
Thank you for your support.

H



Pickle 15-09-2003 11:12 PM

WelchiaWorm
 

"pronoun" wrote in message
...

"fmurl" wrote in message
...
"pronoun" wrote:

Not your gardening variety! Sorry if this is a bit OT, but my new

machine
XP Home (not this one 98SE) caught the worm during it's first ever

session
online yesterday while updating the Anti Virus Software, and with the
Firewall activated (ICF). I did not have time to Update XP. I pulled

the
plug when Norton found the worm--downloaded a removal tool from

Symantec,
and now it seems ok-- but I still need to Update tonight. It's

difficult
to
see what further precautions I could take! I've not yet used email on

that
machine.


Is this NTL by any chance?


--
fmurl


If you mean my ISP it's Plusnet. No emails have been downloaded on the
infected machine--the worm gets in through a vulnerable port. As the
supplied firewall ICF was unable to prevent it: I will install Zone Alarm
before downloading the patches and updates that XP informs me are

necessary.
Thank you for your support.

H


If you have the preview pane on in OE, is that equivalent to opening the
e-mail? Excuse my asking a silly question.



Pickle 15-09-2003 11:13 PM

WelchiaWorm
 

"pronoun" wrote in message
...

"fmurl" wrote in message
...
"pronoun" wrote:

Not your gardening variety! Sorry if this is a bit OT, but my new

machine
XP Home (not this one 98SE) caught the worm during it's first ever

session
online yesterday while updating the Anti Virus Software, and with the
Firewall activated (ICF). I did not have time to Update XP. I pulled

the
plug when Norton found the worm--downloaded a removal tool from

Symantec,
and now it seems ok-- but I still need to Update tonight. It's

difficult
to
see what further precautions I could take! I've not yet used email on

that
machine.


Is this NTL by any chance?


--
fmurl


If you mean my ISP it's Plusnet. No emails have been downloaded on the
infected machine--the worm gets in through a vulnerable port. As the
supplied firewall ICF was unable to prevent it: I will install Zone Alarm
before downloading the patches and updates that XP informs me are

necessary.
Thank you for your support.

H


If you have the preview pane on in OE, is that equivalent to opening the
e-mail? Excuse my asking a silly question.



fmurl 15-09-2003 11:44 PM

WelchiaWorm
 
"pronoun" wrote:

If you mean my ISP it's Plusnet. No emails have been downloaded on the
infected machine--the worm gets in through a vulnerable port. As the
supplied firewall ICF was unable to prevent it: I will install Zone Alarm
before downloading the patches and updates that XP informs me are necessary.


Just curious. I've set up three people with NTL broadband on clean machines
with new media in the last week, each one of them was infected with Welchia
before the sign-up process was complete.


--
fmurl

Jaques d'Altrades 16-09-2003 04:42 PM

WelchiaWorm
 
The message
from "Pickle" contains these words:

If you have the preview pane on in OE, is that equivalent to opening the
e-mail? Excuse my asking a silly question.


Not a silly question. Yes, it opens the e-mail and lets any genii out of
their bottles.

--
Rusty Hinge
No m'lud, it wasn't a sneg. My joints creak.


All times are GMT +1. The time now is 05:37 AM.

Powered by vBulletin® Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
GardenBanter