NACHI-A virus, anyone have experience?

[dxkj]

This virus just went crazy across our network. It identifies as the blaster virus,but really its just an imitation. What it does is destroy the blaster virus, and auto-patch the system from windows update site. The bad part? It spams the network just like the blaster virus trying to find susceptible systems to fix....


Anyone have experience with this? We are able to clean the systems, but does that mean it won't be able to reinfect?

 

[Nohr]

W32.Welchia.Worm aka Win32.Nachi.A

 

[kaizersose]

it uses the same weakness as the blaster virus, the 'remote procedure call'

 

[dxkj]

Originally posted by: kaizersose
it uses the same weakness as the blaster virus, the 'remote procedure call'

ah ok, so patching RPC = patched for both