Thanks for that Michael. I've had a look but as far as I can see there is nothing "new" there. In fact the variant I have is newer than anything they list - Norton lists about eight or ten variants now! I will check all the details they give as one of the things I noticed (and told Norton) is that the folders in which this apparently exists can't be found by me or by the search facility on my PC!!

Also, when I tried forwarding the files to Norton using the built in forwarding facility attached to the Quarantine Folder where two emails were put that apparently contained these, it said the files weren't infected and wouldn't forward them!!

Anyone on this list from Symantec or have a specific name I can send this too? Just sending to Tech Support has, as I said, elicited a great big silence after almost 72 hours now - and I'm concerned as to what might be happening.

Peter MacGregor

At 08:45 27/06/2003, you wrote:
That particular worm can actually disable AV, see if this link actually
helps:
http://vil.nai.com/vil/content/v_100092.htm

Note there are two known Yaha worms mentioned on that site (Network
Associates)

Michael Ensor
www.WellingtonLive.co.nz
----- Original Message -----
From: Peter MacGregor <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, June 27, 2003 7:32 PM
Subject: [wdvltalk] OT - recovering from problems - now my turn!


: Now that Jac is back up and running (sort of!!) maybe some of you friends : can advise me. : : I have Norton Anti-Virus installed (fully paid up copy) and run their Live : Back-up every hour automatically to check for updates. I also have Zone : Alarm running as I have a Broadband connection. : : On Monday morning I got a message that I had the W32.Yaha Virus on my : machine. Like Jac, I stayed calm on top but panicked like fury deep down! : Anyway, I checked my Virus definitions and supposedly it listed this as one : it knew about. I went to their site and found a Yaha Removal Tool so : downloaded that and ran it in strict accordance with the instructions given : at the end of which is says "Run a full scan of your system to ensure the : worm has gone". I did that and all seemed clear. That took best part of six : hours in total - Monday gone! : : Wednesday I got two emails trapped by Norton that had the same virus : attached (both spam porn items). An hour later I got the same message : again to say I had the same virus back (It is apparently actually a worm)! : : I faxed Norton UK offices and gave a long explanation and asked what to do : and have had no response at all. (Why the heck am I paying an annual : subscription?). : : Meantime how can I be sure I have deleted this damn thing. Since I use : Eudora it is likely that the risk of passing it on is smaller than if I : used OE which I haven't for years now. But even so I am minimising my : emailing which is very inconvenient as I run an email advice service for : some of my clients and I'm having to phone them. : : Anyone any sensible ideas (not a time for silly comments I feel). If the : worm is on the virus definitions list on my machine yet isn't being caught, : it says to me that Norton is failing to provide a service - but that's one : for my solicitor to advise on. : : Peter MacGregor : : : : ____ . The WDVL Discussion List from WDVL.COM . ____ : To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] : Send Your Posts To: [EMAIL PROTECTED] : To change subscription settings to the wdvltalk digest version: : http://wdvl.internet.com/WDVL/Forum/#sub : : ________________ http://www.wdvl.com _______________________ : : You are currently subscribed to wdvltalk as: [EMAIL PROTECTED] : To unsubscribe send a blank email to %%email.unsub%% : :


____ � The WDVL Discussion List from WDVL.COM � ____ To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] Send Your Posts To: [EMAIL PROTECTED] To change subscription settings to the wdvltalk digest version: http://wdvl.internet.com/WDVL/Forum/#sub

________________ http://www.wdvl.com _______________________

You are currently subscribed to wdvltalk as: [EMAIL PROTECTED]
To unsubscribe send a blank email to %%email.unsub%%



____ � The WDVL Discussion List from WDVL.COM � ____ To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] Send Your Posts To: [EMAIL PROTECTED] To change subscription settings to the wdvltalk digest version: http://wdvl.internet.com/WDVL/Forum/#sub

________________ http://www.wdvl.com _______________________

You are currently subscribed to wdvltalk as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to