Symantec's official response:
http://securityresponse.symantec.com...or.lateda.html
I wouldn't normally post a stand-alone link but this is one case where you're helping yourself by learning their ropes. The page tells you about the attack, what it'll do, and how to get rid of it.