#1   Report Post  
Old 15-09-2003, 10:03 AM
pronoun
 
Posts: n/a
Default WelchiaWorm

Not your gardening variety! Sorry if this is a bit OT, but my new machine
XP Home (not this one 98SE) caught the worm during it's first ever session
online yesterday while updating the Anti Virus Software, and with the
Firewall activated (ICF). I did not have time to Update XP. I pulled the
plug when Norton found the worm--downloaded a removal tool from Symantec,
and now it seems ok-- but I still need to Update tonight. It's difficult to
see what further precautions I could take! I've not yet used email on that
machine.


  #2   Report Post  
Old 15-09-2003, 05:02 PM
fmurl
 
Posts: n/a
Default WelchiaWorm

"pronoun" wrote:

Not your gardening variety! Sorry if this is a bit OT, but my new machine
XP Home (not this one 98SE) caught the worm during it's first ever session
online yesterday while updating the Anti Virus Software, and with the
Firewall activated (ICF). I did not have time to Update XP. I pulled the
plug when Norton found the worm--downloaded a removal tool from Symantec,
and now it seems ok-- but I still need to Update tonight. It's difficult to
see what further precautions I could take! I've not yet used email on that
machine.


Is this NTL by any chance?


--
fmurl
  #3   Report Post  
Old 15-09-2003, 08:34 PM
Rich P
 
Posts: n/a
Default WelchiaWorm

I had the same experience last week.
I was trying to update someone's PC for the first time and it got infected.

I'd firstly take your machine offline and fully scan the system with Norton
and the removal utility they have.
Then connect and try to get to windowsupdate ASAP and find the patch. I
would also try to do a live update of Norton at the same time.

Good luck, I was ok 2nd time I connected and managed to get all 80+ megs of
windows xp patches downloaded without getting infected again.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
GreedyMoose - Online offers, vouchers and coupons for the UK
http://www.greedymoose.co.uk


"pronoun" wrote in message
...
Not your gardening variety! Sorry if this is a bit OT, but my new machine
XP Home (not this one 98SE) caught the worm during it's first ever session
online yesterday while updating the Anti Virus Software, and with the
Firewall activated (ICF). I did not have time to Update XP. I pulled the
plug when Norton found the worm--downloaded a removal tool from Symantec,
and now it seems ok-- but I still need to Update tonight. It's difficult

to
see what further precautions I could take! I've not yet used email on

that
machine.




  #4   Report Post  
Old 15-09-2003, 09:03 PM
Alan Gould
 
Posts: n/a
Default WelchiaWorm

In article , pronoun fearhoward
@fearhoward.plus.com writes
I've not yet used email on that
machine.

Does that also mean that no e-mails have been sent to you on it?
At present I am deleting all e-mails without opening them unless I am
absolutely certain about their source. Today I had another of those
Microsoft Security Division messages and about 15 Failed Mail and
Rejection Notices along with the usual Viagra, erotic, free holiday and
get-rich-quick offers. I even had a now rare Good News mailing. All are
potential virus carriers and are binned unopened, but still they come.

I use Windows XPHome and NAV/Symantec fully updated, but I'm having some
weird functions in my PC and on the Web just lately. According to the
News,13/14 yr. old kids are sending infections out with ease on their
school 'learning' machines. It cannot be long before they find out how
do it via Usenet groups or unopened e-mails. Brave New World!
--
Alan & Joan Gould - North Lincs.
  #5   Report Post  
Old 15-09-2003, 10:33 PM
pronoun
 
Posts: n/a
Default WelchiaWorm


"fmurl" wrote in message
...
"pronoun" wrote:

Not your gardening variety! Sorry if this is a bit OT, but my new

machine
XP Home (not this one 98SE) caught the worm during it's first ever

session
online yesterday while updating the Anti Virus Software, and with the
Firewall activated (ICF). I did not have time to Update XP. I pulled

the
plug when Norton found the worm--downloaded a removal tool from Symantec,
and now it seems ok-- but I still need to Update tonight. It's difficult

to
see what further precautions I could take! I've not yet used email on

that
machine.


Is this NTL by any chance?


--
fmurl


If you mean my ISP it's Plusnet. No emails have been downloaded on the
infected machine--the worm gets in through a vulnerable port. As the
supplied firewall ICF was unable to prevent it: I will install Zone Alarm
before downloading the patches and updates that XP informs me are necessary.
Thank you for your support.

H




  #6   Report Post  
Old 15-09-2003, 11:12 PM
Pickle
 
Posts: n/a
Default WelchiaWorm


"pronoun" wrote in message
...

"fmurl" wrote in message
...
"pronoun" wrote:

Not your gardening variety! Sorry if this is a bit OT, but my new

machine
XP Home (not this one 98SE) caught the worm during it's first ever

session
online yesterday while updating the Anti Virus Software, and with the
Firewall activated (ICF). I did not have time to Update XP. I pulled

the
plug when Norton found the worm--downloaded a removal tool from

Symantec,
and now it seems ok-- but I still need to Update tonight. It's

difficult
to
see what further precautions I could take! I've not yet used email on

that
machine.


Is this NTL by any chance?


--
fmurl


If you mean my ISP it's Plusnet. No emails have been downloaded on the
infected machine--the worm gets in through a vulnerable port. As the
supplied firewall ICF was unable to prevent it: I will install Zone Alarm
before downloading the patches and updates that XP informs me are

necessary.
Thank you for your support.

H


If you have the preview pane on in OE, is that equivalent to opening the
e-mail? Excuse my asking a silly question.


  #7   Report Post  
Old 15-09-2003, 11:13 PM
Pickle
 
Posts: n/a
Default WelchiaWorm


"pronoun" wrote in message
...

"fmurl" wrote in message
...
"pronoun" wrote:

Not your gardening variety! Sorry if this is a bit OT, but my new

machine
XP Home (not this one 98SE) caught the worm during it's first ever

session
online yesterday while updating the Anti Virus Software, and with the
Firewall activated (ICF). I did not have time to Update XP. I pulled

the
plug when Norton found the worm--downloaded a removal tool from

Symantec,
and now it seems ok-- but I still need to Update tonight. It's

difficult
to
see what further precautions I could take! I've not yet used email on

that
machine.


Is this NTL by any chance?


--
fmurl


If you mean my ISP it's Plusnet. No emails have been downloaded on the
infected machine--the worm gets in through a vulnerable port. As the
supplied firewall ICF was unable to prevent it: I will install Zone Alarm
before downloading the patches and updates that XP informs me are

necessary.
Thank you for your support.

H


If you have the preview pane on in OE, is that equivalent to opening the
e-mail? Excuse my asking a silly question.


  #8   Report Post  
Old 15-09-2003, 11:44 PM
fmurl
 
Posts: n/a
Default WelchiaWorm

"pronoun" wrote:

If you mean my ISP it's Plusnet. No emails have been downloaded on the
infected machine--the worm gets in through a vulnerable port. As the
supplied firewall ICF was unable to prevent it: I will install Zone Alarm
before downloading the patches and updates that XP informs me are necessary.


Just curious. I've set up three people with NTL broadband on clean machines
with new media in the last week, each one of them was infected with Welchia
before the sign-up process was complete.


--
fmurl
  #9   Report Post  
Old 16-09-2003, 04:42 PM
Jaques d'Altrades
 
Posts: n/a
Default WelchiaWorm

The message
from "Pickle" contains these words:

If you have the preview pane on in OE, is that equivalent to opening the
e-mail? Excuse my asking a silly question.


Not a silly question. Yes, it opens the e-mail and lets any genii out of
their bottles.

--
Rusty Hinge
No m'lud, it wasn't a sneg. My joints creak.
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules

Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 08:03 AM.

Powered by vBulletin® Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 GardenBanter.co.uk.
The comments are property of their posters.
 

About Us

"It's about Gardening"

 

Copyright © 2017