I will release an update to the tool tommorow with more advanced information and clearer messages about what actions the tool performed. I will also do research on bal's comment.
Thank you.
Update: bal, can you please run your suspicious files through Link Removed - Product Still in Beta, which currently only detects this worm. I can analyze it then.
This post was edited on 03-28-2005 at 10:24 PM by Dane.
/ 
