The Symmantec site http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED] ves outlines a procedure for manully removing the worm. Part of the process is to check the value of the key:
HKEY_LOCAL_MACHINE\Software\Classes\exefile\shell\open\command it should be: ""%1" %*" If it isn't you still have a problem. drew -----Original Message----- From: Peter MacGregor [mailto:[EMAIL PROTECTED] Sent: Friday, June 27, 2003 3:33 AM To: [EMAIL PROTECTED] Subject: [wdvltalk] OT - recovering from problems - now my turn! Now that Jac is back up and running (sort of!!) maybe some of you friends can advise me. I have Norton Anti-Virus installed (fully paid up copy) and run their Live Back-up every hour automatically to check for updates. I also have Zone Alarm running as I have a Broadband connection. On Monday morning I got a message that I had the W32.Yaha Virus on my machine. Like Jac, I stayed calm on top but panicked like fury deep down! Anyway, I checked my Virus definitions and supposedly it listed this as one it knew about. I went to their site and found a Yaha Removal Tool so downloaded that and ran it in strict accordance with the instructions given at the end of which is says "Run a full scan of your system to ensure the worm has gone". I did that and all seemed clear. That took best part of six hours in total - Monday gone! Wednesday I got two emails trapped by Norton that had the same virus attached (both spam porn items). An hour later I got the same message again to say I had the same virus back (It is apparently actually a worm)! I faxed Norton UK offices and gave a long explanation and asked what to do and have had no response at all. (Why the heck am I paying an annual subscription?). Meantime how can I be sure I have deleted this damn thing. Since I use Eudora it is likely that the risk of passing it on is smaller than if I used OE which I haven't for years now. But even so I am minimising my emailing which is very inconvenient as I run an email advice service for some of my clients and I'm having to phone them. Anyone any sensible ideas (not a time for silly comments I feel). If the worm is on the virus definitions list on my machine yet isn't being caught, it says to me that Norton is failing to provide a service - but that's one for my solicitor to advise on. Peter MacGregor ____ * The WDVL Discussion List from WDVL.COM * ____ To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] Send Your Posts To: [EMAIL PROTECTED] To change subscription settings to the wdvltalk digest version: http://wdvl.internet.com/WDVL/Forum/#sub ________________ http://www.wdvl.com _______________________ You are currently subscribed to wdvltalk as: [EMAIL PROTECTED] To unsubscribe send a blank email to %%email.unsub%% ____ � The WDVL Discussion List from WDVL.COM � ____ To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] Send Your Posts To: [EMAIL PROTECTED] To change subscription settings to the wdvltalk digest version: http://wdvl.internet.com/WDVL/Forum/#sub ________________ http://www.wdvl.com _______________________ You are currently subscribed to wdvltalk as: [EMAIL PROTECTED] To unsubscribe send a blank email to [EMAIL PROTECTED]
