Re: I'm an idiot....

[Toralv_Dirro () NAI COM (Dirro, Toralv)]

> I knew it was an email worm.  In the progress of erasing it I must of
> hit enter, or double clicked on it.
>
> Maybe my mouse should be taken away from me.....
>
>
> When the attached file is executed, it will create the following two
> files:
> C:\WINDOWS\LINKS.VBS
> C:\WINDOWS\SYSTEM\RUNDLL.VBS
> It will also create a file called LINKS.VBS in the root of all network

That verly likely is VBS/Freelink - any recent AV-Software should handle it.
If you're scanning, make sure to scan all files, as .vbs is not a default
extension in many products, yet! This also affects OnAccess Scanners, so be
aware.

best regards,
Toralv Dirro
Virus Research Engineer
Network Associates
AVERT, Central Europe