JVC virus?

TheBattousai · Post by **TheBattousai** » Tue Oct 07, 2003 1:59 am

Anyone heard of this stupid thing yet? I'm trying to help my computer illiterate friend get rid of it, but she's having some problems... What is it even supposed to do? I've seen it come up when I'm talking on AIM with a link to some site with the virus on it. She gave it to me and I seem to be fine now, but I think its still stalking around in her system. Any suggestions on how to EASILY get rid of it would be fantastic.

DocSilly · Post by **DocSilly** » Tue Oct 07, 2003 6:04 am

Are you sure that this is the correct name? A quick search on Google and McAfee or Symantec Virus databases didn't bring up a listing of anything "JVC" virus... got any more info about it ?

TheBattousai · Post by **TheBattousai** » Tue Oct 07, 2003 1:38 pm

Its coming up as a W32/Nachi.Worm, but i'm not sure if that was the original or if it spawned from elsewhere. Everytime I have found it it has has some sort of JVC in its title. The only place I've seen it come from is AIM, but I'm sure it can come from other places.

[edit] Hmmm, it looks like it has been both SVC and JVC. I originally thought it was only JVC, but I just found a lingering piece named SVCHOST.exe. Now I'm getting confused....

DocSilly · Post by **DocSilly** » Tue Oct 07, 2003 2:13 pm

OK, here're some URLs that should help with that worm:

- Symantec info (here it's called W32.Welchia.worm)

- Symantec Welchia removal tool

- McAfee W32.Nachi.Worm info

Post by **FlyingPenguin** » Tue Oct 07, 2003 3:20 pm

SVCHOST.EXE is a legit (and necessary) Windows core file. Don't delete it. If it's infected you'll have to clean it.