New Threat - W32.welchia.worm

[Scarthy © ® ™]

Hi all ;),

Just got this today through BigFix...

Virus: W32.Welchia.Worm 

A w32.Blaster worm virus variant was spotted for the first time early this morning (19/08/03).

This virus uses the same vulnerability (see second link below) as the Blaster worm but also contains code to exploit an earlier vulnerability (see third link below).

A user who has installed all of the Microsoft Critical updates in line with the 2003 security bulletins will not be affected by the Virus  

If either of the updates has not been applied they must both be installed.

Please follow the advise on Microsoft's web site to ensure these files are present on the PC.

If your computer becomes infected with the virus Please follow the steps below: (Even if you don't have the virus, follow the links to the Microsoft Patches and apply them to secure against future infection)

1.       Start PC and log on to Internet

2.       If you get the message "Windows Will be Shutdown in 60 seconds"

Click START then click RUN and then type in the RUN box "shutdown -a" (without the quotes) and click OK 

This should stop the countdown.

Next you need to remove the virus - See Link below

The important thing is to get the patch from Microsoft or you will keep on getting the virus. - See the links below:

Click HERE for the Symantec Removal Instructions and Tool.

Click HERE for the Microsoft patch (Bulletin MS03-026).

Click HERE for the Microsoft patch (Bulletin MS03-007).

;)

NB.

1st Microsoft Link is the update for the W32.Blaster.Worm patch.

2nd Microsoft Link - If you are unsure whether you have this update goto CONTROL PANEL > Add/Remove Programs > Check for Q815021 in the list of updates you have installed (I already had it).