>Have you have any successful attempts?

Yes, Norton Anti-Virus has successfully detected and quarantined this virus
since I downloaded the daily manual update for 01/13 and installed it.

Those who use Norton's Live Update have their virus definitions updated once
a week automatically if and only if the automatic update option has been
turned on.  AFAIK the Live Update virus definitions are updated once a week
on the Norton web site.  Assuming a random distribution of Norton user
update dates the probability that any user would have updated their virus
definitions by 8PM PST 01/13/03 would have been very roughly 0.5.  Mine
weren't yet updated for that week and the virus came right through Norton's
virus barrier.  I thought some of the list members might find this
information useful.  While this virus is less than catastrophic, getting rid
of it would require a bit of time.

The page you cited from my original reference did not contain the
information you refer to below at the time of my posting.  In fact the first
time I looked at it on 01/13 all it had was the name of the virus and its
type, discovery date, and that it was "wild" and "Threat Category 2".  By
midnight or so on the 13th the page stated that the virus had been upgraded
to Threat Category 3 and that the virus definition was in the "Intelligent
Updater" for 1/13 which I downloaded and used.  At that point I confirmed
that the virus was the one I suspected and I posted a warning to the list.
BTW the Symantec page in question was most recently updated on 01/17/03 at
11:24PM which is probably the version you are quoting.

Symantec didn't post a method for curing an infected machine until 01/14 and
now I see they have added a tool for removing this particular virus.


At 05:52 PM 1/19/2003 -0500, you wrote:
>>> This one is moderately nasty and your current Norton AntiVirus files
>will
>not detect this virus.  You can get an intermin update from Symantec.  I've
>had six infection attempts in two days.
>
>See:
>
>http:[EMAIL PROTECTED]
><<
>
>According to this link, the 1/10/2003 updates WILL stop it.  Have you have
>any successful attempts?
>
>

Reply via email to