Results 1 to 8 of 8

Thread: Nachi virus

  1. #1
    'ave it. Skii's Avatar
    Join Date
    Jul 2003
    Location
    Right here - right now.
    Posts
    4,710
    Thanks
    45
    Thanked
    27 times in 18 posts

    Nachi virus

    Ok

    I'm getting a little annoyed with this AVG window popping up and warning me that I have this damn virus / worm

    I've run 2 different patches to remove it , which were apparently successful, but STILL this bloody warning keeps popping up

    Any ideas !?!!?!?!

  2. #2
    'ave it. Skii's Avatar
    Join Date
    Jul 2003
    Location
    Right here - right now.
    Posts
    4,710
    Thanks
    45
    Thanked
    27 times in 18 posts
    oh god now m8 system just shut itself down

  3. #3
    Vive le pants! directhex's Avatar
    Join Date
    Jul 2003
    Location
    /dev/urandom
    Posts
    17,074
    Thanks
    228
    Thanked
    1,027 times in 678 posts
    • directhex's system
      • Motherboard:
      • MSI X99A Gaming 7
      • CPU:
      • Intel Core i7 5280k
      • Memory:
      • 32GiB ADATA DDR4
      • Storage:
      • Corsair Neutron XT 960GB
      • Graphics card(s):
      • MSI GTX 980 Gaming 4G Twin Frozr 5
      • PSU:
      • Corsair AX860i
      • Case:
      • NZXT H440
      • Operating System:
      • Ubuntu 17.10, Windows 10
      • Monitor(s):
      • Dell U2713HM
      • Internet:
      • FIOS
    run windows update so you stop re-infecting yourself?

  4. #4
    I can't get no sleep
    Join Date
    Jul 2003
    Location
    123 Fake Street, London
    Posts
    811
    Thanks
    35
    Thanked
    3 times in 3 posts
    Yep, you need to download the windows update to plug the RPC problem. If for some reason you can’t download it, then according to Microsoft the ports that need to be blocked are incoming TCP ports 80, 135, 139, 445 and 593; UDP ports 135, 137, and 138.

    I would have thought a firewall would all ready block the ports used by this worm. If you’ve not got a firewall then you should. I use Zone Alarm Pro myself, but I’m sure others may recommend another. You can get the free version from here

    If AVG continues not to work, there is a tool to remove the worm on this site. If you are using XP you’ll need to disable system restore in order to successfully remove the worm. I think you’ll need to install the Microsoft patches/block the ports before you use the tool otherwise you’ll just get re-infected when you go online.
    Last edited by Anders; 22-10-2003 at 01:08 AM.
    "Keyboard missing - press F3 to continue" Message seen on an Apricot PC.
    "To start press any key. Where's the any key?" Homer Simpson.
    Hexus Trust

  5. #5
    'ave it. Skii's Avatar
    Join Date
    Jul 2003
    Location
    Right here - right now.
    Posts
    4,710
    Thanks
    45
    Thanked
    27 times in 18 posts
    Thanks guys - I don't have a Firewall so now might be a good time to install Zonealarm, but I did download Service pack 1 and critical updates from Microsoft before any of this happened

  6. #6
    Senior Member
    Join Date
    Aug 2003
    Posts
    705
    Thanks
    0
    Thanked
    0 times in 0 posts
    Unfortunaetly this virus attacks in a different way from the norm. Most viruses are brought into a pC by the user thru email, floppy etc but the Nachi one actually scans the internet for vunerable machines and infects automatically so you may be removing it and being re-infected over and over....


    So run a firewall, update windows then run the removal programs and you should never get it again.


    Fun Not Frags - www.gsvgaming.net

  7. #7
    Member
    Join Date
    Jul 2003
    Posts
    88
    Thanks
    0
    Thanked
    0 times in 0 posts
    worth making a note that both blaster and nachi can remain resident in the system restore files even after you've swept for virii and done all the updates... you just have to disable and reenable it.. (you lose your restore points unfortunatly)
    ------------------------------------
    information is not a property of matter, it's applied to matter by intelligence

  8. #8
    Senior Member
    Join Date
    Aug 2003
    Location
    Chesterfield
    Posts
    1,436
    Thanks
    4
    Thanked
    5 times in 5 posts
    Originally posted by s1lv3r
    worth making a note that both blaster and nachi can remain resident in the system restore files even after you've swept for virii and done all the updates... you just have to disable and reenable it.. (you lose your restore points unfortunatly)
    Although its infected with the virus anyway so would you really want to keep it?

    When you re-enable system restore I think there is an option to set one, might be worth doing if you ever use system restore.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •