[tacticalogic]

According to SANS: the virus downloads part of itself from a list of known websites. Blocking the following site at your perimeter can mitigate the risk of this virus

http://polobeer.de/2.jpg

http://www.no-abi2003.de/2.jpg

For home users, blackhole these sites in your hosts file, and the virus won't be able to connect to them.

[JerseyHighlander]

Thanks for the info, could I ask a simple question, should I write
127.0.0.1 http://polobeer.de/
OR
127.0.0.1 polobeer.de
in the Hosts file? Or something else, I'm not quite sure, I d/l an adblocking hosts file, never looked into this too much.