|
|||||
| Green Apple News: Welchia Worm Info | |||||
| August 20, 2003 Welchia, a variant of the MSBlast worm, is spreading across the Internet. The worm infects a machine by using the same Windows exploit as MSBlast, and only affects Windows NT 4.0, XP and 2000. This worm attempts to do some "good" for the infected machine, by downloading and installing the Microsoft RPC patch, removing MSBlast, and, ultimately, turning itself off in 2004. However, the seemingly 'Good' worm is causing the same network congestion and PC instability as MSBlast. Green Apple has disabled certain ports used by
Welchia as recommended by Microsoft, which greatly lowers the possibility for
the worm to enter or leave our network and affect our users. However,
every Windows user is urged to visit Microsoft's Windows Update and install
the patch for this Windows flaw. Windows Update is found at If you are infected, in addition to installing
the patch you will need to remove the worm with the Symantec (Norton) removal
tool. This tool may be downloaded here If you believe your
computer is infected and could use help, please do not hesitate to
give us a call. As always, Green
Apple users are welcome to bring in their machines for virus scans and virus
removals.
For more information on
viruses in general and prevention techniques, please see |
|||||
|
|