That particular worm can actually disable AV, see if this link actually helps: http://vil.nai.com/vil/content/v_100092.htm
Note there are two known Yaha worms mentioned on that site (Network Associates) Michael Ensor www.WellingtonLive.co.nz ----- Original Message ----- From: Peter MacGregor <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, June 27, 2003 7:32 PM Subject: [wdvltalk] OT - recovering from problems - now my turn! : Now that Jac is back up and running (sort of!!) maybe some of you friends : can advise me. : : I have Norton Anti-Virus installed (fully paid up copy) and run their Live : Back-up every hour automatically to check for updates. I also have Zone : Alarm running as I have a Broadband connection. : : On Monday morning I got a message that I had the W32.Yaha Virus on my : machine. Like Jac, I stayed calm on top but panicked like fury deep down! : Anyway, I checked my Virus definitions and supposedly it listed this as one : it knew about. I went to their site and found a Yaha Removal Tool so : downloaded that and ran it in strict accordance with the instructions given : at the end of which is says "Run a full scan of your system to ensure the : worm has gone". I did that and all seemed clear. That took best part of six : hours in total - Monday gone! : : Wednesday I got two emails trapped by Norton that had the same virus : attached (both spam porn items). An hour later I got the same message : again to say I had the same virus back (It is apparently actually a worm)! : : I faxed Norton UK offices and gave a long explanation and asked what to do : and have had no response at all. (Why the heck am I paying an annual : subscription?). : : Meantime how can I be sure I have deleted this damn thing. Since I use : Eudora it is likely that the risk of passing it on is smaller than if I : used OE which I haven't for years now. But even so I am minimising my : emailing which is very inconvenient as I run an email advice service for : some of my clients and I'm having to phone them. : : Anyone any sensible ideas (not a time for silly comments I feel). If the : worm is on the virus definitions list on my machine yet isn't being caught, : it says to me that Norton is failing to provide a service - but that's one : for my solicitor to advise on. : : Peter MacGregor : : : : ____ . The WDVL Discussion List from WDVL.COM . ____ : To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] : Send Your Posts To: [EMAIL PROTECTED] : To change subscription settings to the wdvltalk digest version: : http://wdvl.internet.com/WDVL/Forum/#sub : : ________________ http://www.wdvl.com _______________________ : : You are currently subscribed to wdvltalk as: [EMAIL PROTECTED] : To unsubscribe send a blank email to %%email.unsub%% : : ____ � The WDVL Discussion List from WDVL.COM � ____ To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] Send Your Posts To: [EMAIL PROTECTED] To change subscription settings to the wdvltalk digest version: http://wdvl.internet.com/WDVL/Forum/#sub ________________ http://www.wdvl.com _______________________ You are currently subscribed to wdvltalk as: [EMAIL PROTECTED] To unsubscribe send a blank email to [EMAIL PROTECTED]
