Originally posted here by nihil
Roach4,

This is a mass mailing worm (MMW) it uses e-mails, php?.........websites????????????? I do not believe that you have the name right? or there is a confusion in naming between the AVs?

Which link are you afraid of visiting?...just post it and I will let you know......and what my stuff finds on it.........if there is anything malicious

Cheers
Hi nihil, I think what he is talking about is this part of the virus:

Sends and HTTP GET request to the following Web sites on TCP port 80:

www.strato.de/1.php
www.strato.de/2.php
www.47df.de/wbboard/1.php
www.intern.games-ring.de/2.php
I think what he is getting at, is what will happen if he visits one of those sites. I haven't got a lab machine set-up right now or I'd go have a look.

Cheers:

/edit
You can check out the Symantec write up here