>This site talks you through fixing the problem
>
>http://www.thepope.org/index.pl?node_id=140
>
>It also suggests that its more than just Jpegs that get hit ...
>
>"10. This is the most painful part. This virus replaces every file with the following file extensions: vbs, vbe, js, jse, css, wsh, sct, hta, jpg, jpeg, mp3, mp2. You can't get the files back, but you can at least delete them pretty easily. Do a search for all files with the .vbs extension (Start->Find and enter '*.vbs' in the Named field, then click Find Now). Select all of the results, and hit delete."

We have seen dlls and the registry hit. Windows 98 handles restoring those files well, but we cannot on Windows NT. I do not know the extent of what it does on NT, but 98 detected the changes for us.