Looks like you did get rid of it Barry, if the 137k winupdate.exe file wasn't in your \winnt\system32 directory (or \windows\system, or similar),...
It's a new variant of SDBOT Newt wrote: >>Well, you have WORM_SDBOT.ER for sure and it does just what sparrow warned about - opens your system...
Separate names with a comma.