[Dshield] New Welchia/Nachi worm activity

Alan Frayer afrayer at frayernet.com
Tue Nov 11 15:32:47 GMT 2003

I've noticed a recent increase in infected e-mails arriving in my

On Tue, 2003-11-11 at 04:24, Anu Nayar wrote:

> Has anyone seen a resurgence of Welchia/Nachi activity recently? I am coming
> across multiple instances of the worm attempting to propagate on systems
> that were patched for MS03-026. The only saving grace on these occasions
> have been current AV protection that has detecting and quarantining the
> culprit files.
> Any input would be much appreciated.
> Anu Nayar


Alan Frayer,CNE,CNI,CIW CI,MCP,Net+ - afrayer at frayernet.com
Friends don't let friends use Active Directory
Visit Frayernet - http://www.frayernet.com
Shop at buyneatstuff - http://www.buyneatstuff.net

More information about the list mailing list