# Welchia worm

**URL:** https://boards.straightdope.com/t/welchia-worm/196301
**Category:** Factual Questions
**Created:** [August 19, 2003, 10:00pm UTC](https://boards.straightdope.com/t/welchia-worm/196301 "2003-08-19T22:00:53Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![ReuvenB](https://avatars.discourse-cdn.com/v4/letter/r/9fc348/32.png) [@ReuvenB](https://boards.straightdope.com/u/ReuvenB)
#### Post date: [August 19, 2003, 10:00pm UTC](https://boards.straightdope.com/t/welchia-worm/196301/1 "2003-08-19T22:00:53Z")

</div>

I was looking at symantec’s website, and noticed a short description of the [worm](http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.htmlWelchia). It apparently gets the patch for the RPC exploit, deletes the msblaster worm, and uninstalls itself.  
These all seem like good things, especially for a virus. Two questions:  
1.Why would someone malicious enough to write a virus write one that does something good?  
2.Why are we trying to eliminate this, if it’s only doing good things?

---

<div class="post-metadata">

### Author: ![Mort\_Furd](https://avatars.discourse-cdn.com/v4/letter/m/8e8cbc/32.png) [@Mort\_Furd](https://boards.straightdope.com/u/Mort_Furd)
#### Post date: [August 19, 2003, 10:10pm UTC](https://boards.straightdope.com/t/welchia-worm/196301/2 "2003-08-19T22:10:55Z")

</div>

Do you want just any Tom, Dick, or Harry virus programmer changing stuff on your PC? Are you sure that it really only does this kind deed? Do you really want a virus war raging through the world, with the “good” ones zipping around the globe and invading your computer to be sure you haven’t got a “bad” virus? Have you considered that applying the patch may have unwanted, negative side effects? Have you considered that this “good” virus may serve as a template for someone else to create a “bad” virus?

A virus is a virus, and should be eliminated.
