[ccurrie]

http://www.sophos.com/virusinfo/analyses/jspsymean.html

The virus was downloaded from http://underground.ae21vek.ru/Windows-KB833987-x86.exe (it is safe to download the file and see if your virus scanner detects it, but DO NOT browse the index.html at the root of that site if you are using MS Explorer)

[lentulusgracchus]

Thanks, and I read the article at your Sophos link, but I didn't get a hit in Grisoft's virupedia, so notwithstanding that they recently got a 100% score from Virus Bulletin when tested under Win2003 Server, I thought I'd better not tempt fate by visiting the site.

Thanks for driving me to Grisoft's site, though. I found their notice that they'll be discontinuing their support of Grisoft AVG 6.0 (free edition) at the end of the year, in favor of a new engine and definition d/b available, likewise, for free to individual users. For a minute I thought they were just going to drop the free edition idea, but they aren't. There's always AntiVir, but I don't know how good they are, if Grisoft decides they want to do it some other way.

[lentulusgracchus]

Just spent some time looking at free anti-virus packages.

Grisoft AVG is recommended by Kim Komando and some of the techies at my ISP. Its free version runs under Win9x on, and also runs under Linux (but not server OS's).

H+BEDV Datatechnik's AntiVir free version runs under Win9x on, but not Linux or server versions. They struggled for years to get to the gold standard of reliability but achieved it about a year ago.

ALWIL's avast! 4.0 (free home version) is also a Windows 9x+ product and has done well recently in stringent tests. They also have a PDA version (both Palm OS and WinCE/Pocket PC) for not very much money, that looks for the small d/b of PDA-specific malware.

Just for info.