In addition:

Replaces the following files on all drives (real and mapped):

hta, css, wsh, js, jse, sct files are all overwritten with the virus, and
their extensions changed to .vbs


and:

Changes the following registry setting:

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page"

it will be pointing to an address under skyinet.net. Change this to be
"about:blank" (or a URL if you prefer...)

All major antivirus companies have now released patches; though you will be
lucky to get through to their download sites at the moment...

Ben


 XSL-List info and archive:  http://www.mulberrytech.com/xsl/xsl-list