W32.Welchia Worm Virus

Discussion in 'Windows Desktop Systems' started by wingman411, Dec 18, 2003.

  1. wingman411

    wingman411 OSNN Senior Addict

    Messages:
    297
    Location:
    North of Seattle
    Can anyone tell me if this is the source of getting a virus. I got this in an e-mail and now I think it may have coused a virus.
    It is a Christmas card. I forworded it to my friends and I don't want to be the source of them getting a virus.

    http://web.icq.com/shockwave/0,,4845,00.swf
     
  2. Enyo

    Enyo Moderator

    Messages:
    1,338
  3. wingman411

    wingman411 OSNN Senior Addict

    Messages:
    297
    Location:
    North of Seattle
    Where does the Welchia virus originate?
     
  4. Reg

    Reg eXperienced!

    Messages:
    639
    Location:
    Arlington, TX
    Welchia (Network Associates: Nachi) is an RPC virus. The original virus started as an email that was sent to people spoofing Microsoft's address. In the email, it talked about Blaster (Blaster-A) and said that to fix your computer from getting this virus, install this patch (Welchia/Nachi). Welchia would then remove Blaster, but would install itself in its place. It then infects other computers using the RPC security flaw that Blaster exploited. Welchia is an .exe executable and you can not catch it from a webpage.
     
  5. wingman411

    wingman411 OSNN Senior Addict

    Messages:
    297
    Location:
    North of Seattle
    Thanks for all your help. I feel better.