I did a reformat and reinstallation of Win XP last night and this morning, when I hooked up the Net and download McAfee Virusscan, it told a few minutes later after installing the Windows Updates that it detected the Nachi worm and deleted it. Now, this is the second time this happened to me, and the first time was when I bought Win XP and installed it on a reformatted drive. I did some research on McAfee about the worm, but I still have one question: Is this worm present on my system when I reinstall Win XP or do I become instantly affected when I hook up to the Net? I didn't do anywhere on the Net except on MSN site and McAfee. I also have another hard drive hooked up as a slave, but it only contains music files. Could that be the culprit also?

Re: nachi worn and reinstallation by Kent

Kent
Sat Jan 10 19:52:55 CST 2004

Ty wrote:

> ... I still have one question: Is this worm present
> on my system when I reinstall Win XP or do I become instantly
> affected when I hook up to the Net?

You are instantly affected when you hook up to the Net unless:

1) you have a firewall enabled to block NetBIOS
2) and you have installed the patch that fixes the vulnerability

--
Kent W. England, Microsoft MVP for Windows Security

Re: nachi worn and reinstallation by Bill

Bill
Sat Jan 10 20:13:30 CST 2004

As Kent says...

It doesn't matter what site you do or don't connect to--connecting to the
Internet without even opening a web browser or other application will get
you nachi or blaster within seconds. It is coming from existing infected
machines searching for unprotected machines to infect.

You must either patch before connecting to the internet (or, in some cases,
even a large corporate network) or be sure that the firewall is enabled
before you connect to the Internet.

The world has changed with regard to a clean XP install.


"Ty" <anonymous@discussions.microsoft.com> wrote in message
news:BDF583DA-1E8B-4289-91A9-4747B08D919A@microsoft.com...
>I did a reformat and reinstallation of Win XP last night and this morning,
>when I hooked up the Net and download McAfee Virusscan, it told a few
>minutes later after installing the Windows Updates that it detected the
>Nachi worm and deleted it. Now, this is the second time this happened to
>me, and the first time was when I bought Win XP and installed it on a
>reformatted drive. I did some research on McAfee about the worm, but I
>still have one question: Is this worm present on my system when I reinstall
>Win XP or do I become instantly affected when I hook up to the Net? I
>didn't do anywhere on the Net except on MSN site and McAfee. I also have
>another hard drive hooked up as a slave, but it only contains music files.
>Could that be the culprit also?



Re: nachi worn and reinstallation by anonymous

anonymous
Sun Jan 11 11:01:16 CST 2004

Thanks for the responses. I was coming to the same conclusion myself.