Many of you may have already seen this worm. But I saw it the hard way this evening. While my Norton Anti-Virus quarantined the infected files, it was unable to fix the worm and my infected key in my registry. My virus definitions are up-to-date as of 10/09/02.

I download the W32.Yaha worm fix via the following web page:

http://securityresponse.symantec.com/...ha.removal.tool.html

Yet after running this tool, it could not find the W32.Yaha worm. So, I deleted the infected files and their backups...hopefully this will help to solve the problem...although after reading about this worm, it seems to affect all .exe files and corrupts your registry.

Anyway, for more information on this worm, go to:

http://www.google.com/...UTF-8&q=W32.Yaha

BTW: If anyone's computer has been infected by this worm and has any suggestions for eradicating it from my computer completely, let me know.

Thanks in advance.
========================================
Buh Bye!

Cheers,
Me

Yeah, here you go:

fdisk /MBR
easy does it

Eliot

Try this:

http://www.sophos.com/...tion/yaharemove.html

- wil

Thanks, Wil.

Unfortunately, it will be difficult to run that tool correctly since I do not have an "uninfected" computer at home. But I may try creating the tool disk at work on an uninfected computer and try running the tool again.

I guess I shouldn't have been hasty in deleting the infected file...and the sucky thing is the infected file was my Communicator "Inbox" file, which means that I lost a bunch of email messages...not to bad, since I download copies at the office as well.
========================================
Buh Bye!

Cheers,
Me

Ouch.

All more reason to move your mailbox to IMAP. :-)

- wil