Symantec have released a small removal tool, I'd advise anyone to run it, even if they're fairly certain that they aren't infected:
http://securityresponse.symantec.com...oval.tool.html
Printable View
Symantec have released a small removal tool, I'd advise anyone to run it, even if they're fairly certain that they aren't infected:
http://securityresponse.symantec.com...oval.tool.html
Too bad the Symantec tool advises to disable System Restore before using.
It does? I didn't see that anywhere. Anyways I ran it without disabling Sys Restore, it didn't cause any problems.
SuperSparks--Look at #6 under the heading "How to download and run the tool". Of course I can understand why this would be needed if you learn you are infected, since using System Restore would only restore the worm. I think I will run the Symantec tool, as you did, without disabling SP, and disable SR and rerun the scan only if the first pass tells me I am infected.
A link to an interesting article on how quickly BlackWorm was identified and captured by most of the AV world...
http://www.pcmag.com/article2/0,1895,1916880,00.asp