»
 

Go Back   ResellerRatings Store Ratings > ResellerRatings Forums > Tech Support

Reply
 
LinkBack Thread Tools Display Modes
Old 04-21-2004, 08:46 AM   #1 (permalink)
Registered User
 
DemonKnight's Avatar
 
Join Date: Oct 2001
Posts: 274
DemonKnight is on a distinguished road
Send a message via AIM to DemonKnight
worm.nachi.b I've got it....

AVG detected it, but couldent get rid of it, the sites I've found it seem to make it out as a non desctuctive worm that actaully tries to help by deleteing other worms. What should I do?

Windos XP Pro is my OS I just reinstalled and havent had a chance to update any thing.

DemonKnight is offline   Reply With Quote
Old 04-21-2004, 08:51 AM   #2 (permalink)
Registered User
 
bailey's Avatar
 
Join Date: Oct 2003
Location: Kansas City, Mo.
Posts: 558
bailey is on a distinguished road
this should fix your problem
http://www.trendmicro.com/vinfo/viru...e=WORM_NACHI.B

good luck
bailey is offline   Reply With Quote
Old 04-21-2004, 08:56 AM   #3 (permalink)
Registered User
 
rastorize's Avatar
 
Join Date: Jul 2002
Location: FM6 4th Floor
Posts: 403
rastorize is on a distinguished road
Send a message via Yahoo to rastorize
A good worm?!

Although it may be doing some good things such as downloading the patches from Msft (which should've already been done - you should always keep your system patched as soon as Msft makes the patches available)...but it's considered 'malware' and it has backdoor capabilities...which is never a good thing.

It listens to random ports and sends SYN packets to various locations in order to notify those locations that a specific port in the system is already open. When the remote location receives this information, the said remote location may already connect to the infected system. This makes the system vulnerable to malicious attack.

This might help in its removal...and here.
rastorize is offline   Reply With Quote
Old 04-21-2004, 09:04 AM   #4 (permalink)
Registered User
 
originel's Avatar
 
Join Date: Jun 2002
Location: Texas Tech
Posts: 1,538
originel is on a distinguished road
Send a message via AIM to originel
Nachi is an interesting worm. It's the same as the blaster worm (based on it in fact) except that it deletes any other RPC fault worms in the process. it still uses significant amount of bandwidth though. btw update windows ASAP, this problem was fixed many security patches ago.

I've gotten it a few times when reinstalling windows but AVG was able to delete it for me. i guess it got into your system volume information folder, those can be a pain to remove but can be done with AVG by turning off system restore and rebooting
originel is offline   Reply With Quote
Old 04-21-2004, 09:16 AM   #5 (permalink)
Registered User
 
DemonKnight's Avatar
 
Join Date: Oct 2001
Posts: 274
DemonKnight is on a distinguished road
Send a message via AIM to DemonKnight
I rescanned with AVG and it was able to move the virus. I will start the update process now. I've got SP1a on a CD so I dont have to DL that monster again. (I'm on dial up mind you.) after that I'll see what windows update throws at me.
DemonKnight is offline   Reply With Quote
Reply




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Most Active Discussions

Recent Discussions

All times are GMT -6. The time now is 04:49 PM.