I got a worm called W32.Welchia.Worm it infects a couple of Windows files (dllhost.exe and svchost.exe), it atempts to do the following: Attempts to download the DCOM RPC patch from Microsoft's Windows Update Web site, install it, and then reboot the computer. Checks for active machines to infect by sending an ICMP echo request, or PING, which will result in increased ICMP traffic. Attempts to remove W32.Blaster.Worm. I had this and it caused an excesive amount of hard drive acessing and a lot of Zone Alarm action, it also caused a lot of problems with my internet connection. Its relatively harmless but i thought i'd let everyone know about it for obvious reasons. To check if you've got it go to your Windows directory and look in System32\wins for dllhost.exe and svchost.exe. This directory should be clean of those files. If you have those files your gonna need the removal tool from here. http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html ...
