Who else is getting this Worm/Spybot?

I have not been following this n.g. regularly for several months now,
but after being attacked several times recently by a particular one
that AVG has picked up - I wonder who else is seeing it, and what
suggestions are available. Apparently I got infected on 11/9/03 and
AVG cleaned my system and identified that it had 6 discrete parts or
files, all apparently in my C:\Windows\System folder.

It logged them under the following names:

WINLODR.SCR
WGJRONR.SCR
IGSBTPV.SCR
NECPQJO.SCR
RMZYRSX.SCR
OAIESIU.SCR

Then the same package made its way partially onto my system on or
about 2/10/04, and AVG cleaned things up again. I spotted it as a
suspicious incoming file before it completed, so AVG only found 3 of
the 6 listed above. But they were enough to do some damage, until
they were removed.

And finally, I began following a different procedure for obtaining my
emails, so spotted it once again attempting to penetrate on 2/12/04
and successfully cut it off before any part made it through.

In the first two instances where it got in my system, AVG identified
it as "WORM/SPYBOT", but I have no other information about it. What
can anyone else share with me on this?

Olin McDaniel

To reply by email, please remove "abcd" from Return address
-----------------------------------------------------
"Ignorance is treatable, Stupidity is incurable. Sometimes
the difference is hardly distinguishable, however."

Maybe not here but in Microsoft's virus News Group 'microsoft.public.security.virus' there
have been many who have been "hit" by the SpyBot.

Dave



"Olin K. McDaniel" <omcdaniel.abcd DeleteThis @mindspring.com> wrote in message
news:40303e1e.42184867@news.east.earthlink.net...
| I have not been following this n.g. regularly for several months now,
| but after being attacked several times recently by a particular one
| that AVG has picked up - I wonder who else is seeing it, and what
| suggestions are available. Apparently I got infected on 11/9/03 and
| AVG cleaned my system and identified that it had 6 discrete parts or
| files, all apparently in my C:\Windows\System folder.
|
| It logged them under the following names:
|
| WINLODR.SCR
| WGJRONR.SCR
| IGSBTPV.SCR
| NECPQJO.SCR
| RMZYRSX.SCR
| OAIESIU.SCR
|
| Then the same package made its way partially onto my system on or
| about 2/10/04, and AVG cleaned things up again. I spotted it as a
| suspicious incoming file before it completed, so AVG only found 3 of
| the 6 listed above. But they were enough to do some damage, until
| they were removed.
|
| And finally, I began following a different procedure for obtaining my
| emails, so spotted it once again attempting to penetrate on 2/12/04
| and successfully cut it off before any part made it through.
|
| In the first two instances where it got in my system, AVG identified
| it as "WORM/SPYBOT", but I have no other information about it. What
| can anyone else share with me on this?
|
| Olin McDaniel
|
| To reply by email, please remove "abcd" from Return address
| -----------------------------------------------------
| "Ignorance is treatable, Stupidity is incurable. Sometimes
| the difference is hardly distinguishable, however."