Re: Reappearing W32.Beagle.AW@mm worm
From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: Thu, 2 Dec 2004 21:17:39 -0500
Yes. Just another infection transfer method.
"jerry" <firstname.lastname@example.org> wrote in message
| Yeah, I have an iPAQ cradled to my desktop. Do you think it's coming from an
| email message on it?
| "David H. Lipman" wrote:
| > Looks like it is coming through a device using ActiveSync. Do you have a Blackberry or
| > other wireless mail device ?
| > What's connecting to ActiveSync ?
| > Dave
| > "jerry" <email@example.com> wrote in message
| > news:50446851-2AC5-4531-AD03-37E8D5F16926@microsoft.com...
| > | I'm running Symantec AntiVirus Corporate Edition (fully updated definitions)
| > | on my XP desktop, and it keeps quarantining instances of the Beagle worm, yet
| > | when I run the removal tool from Symantec, it finds nothing. Is it the same
| > | worm that keeps writing itself onto my computer, or is my antivirus program
| > | just catching multiple instances of the worm from my email program? It
| > | always finds the worm in the following folder: c:\Documents and
| > | Settings\Jerry\Local Settings\Application Data\ActiveSync, and the file is
| > | named 'joke.com'. Running a full system scan with my antivirus programs
| > | yields no results either. Any help would be appreciated. Thanks.