Aces High Bulletin Board

Help and Support Forums => Technical Support => Topic started by: Gremlin on October 02, 2003, 06:15:24 PM

Title: Nasty Worm - W32/Nachi.worm
Post by: Gremlin on October 02, 2003, 06:15:24 PM

Just for info:

This is doing the rounds big time.  If you have a firewall up and you notice 'dllhost.exe' doing a lot of chattering, chances are nachi is at work.  Run a good virus scanner.  You can get an excellent and free scanner (AVG Anti Virus) from http://www.grisoft.com

I had my system exposed for less and 30 minutes tonight while i did some software upgrades and in that short space of time the lil blighter managed to 'worm' its way in (no pun intended)

Win2k, nt4, and xp users should read this and install the MS03-039 vulnerability patch.

Microsoft Security Bulletin MS03-039 (http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-039.asp)

Further info on W32/Nachi.worm can be found here. (http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100559)

Title: Nasty Worm - W32/Nachi.worm
Post by: Joc on October 06, 2003, 05:09:26 AM

Uhhhhhhhhhh just installed that 'AVG' turned out Id over 900 files infected with the little F*&&"(*"&er and another worm,SO Ive had to format me Hd,just gettin everything back together now,re-installed etc,guys that write these things need hung,drawn and quartered......:mad:

Title: Nasty Worm - W32/Nachi.worm
Post by: Gremlin on October 06, 2003, 07:47:55 AM

No wonder those rooknit sheep didnt want to have anything to do with ya:D

You got a firewall uop JOC?  If not I suggest zone alarm pro.

http://www.zonelabs.com

remember to give aces high access to all ports.  With a firewall, security patches installed and regular virus scans you can be reasonably sure you'll keep the bastages out and even if one gets through, you'll catch it quickly before it infects so many files.

Also remember to disable the virus scanner while you are actually playing ah, or your connex will suffer.

Title: Nasty Worm - W32/Nachi.worm
Post by: Joc on October 06, 2003, 12:22:56 PM

Gremlin,after I reformatted my Hd the file that was infected  'dllhost.exe' was STILL there!!! its in the virus vault,is it ok to delete the file thats there now? will that get rid of the bugger?:eek:

Title: Nasty Worm - W32/Nachi.worm
Post by: Gremlin on October 06, 2003, 03:40:43 PM

Yep get rid of any lil blighter in your quarantine folder.  It's not really dllhost.exe but the lil fediddleer nachi posing as it.