W32.Entangle - Achtung.exe

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.Entangle

Sender:

Varies.

Subject:

Achtung!
Cool
Einladung
*G*
Gehard Schr÷der
Geschenk
Info
Joke!
Mitteilung
Neuigkeit
Nice Tool
Papst
Update
Wichtig!

Message:

....anbei die Wegbeschreibung
Achtung es kursiert ein sehr gefährlicher Virus! Ich habe dir schon
mal den Virus-Check dafür an die Mail gehängt.
Achtung neuer Virus gefunden!
Anbei das neue Desktop Tool 3.11!
Bills bester Freund *g*
Ciao bis dann!
Das MUSST du dir anschauen...
Endlich mal was wirkilch neues.
FICKEN!
Führ den Check bitte aus! Der Virus löscht nämlich dein komplettes
Windows.
HAHAHA!
Hallo,
Hi!
Ich hab Dir das neue Demo von *LPL* geschickt!
Jetzt wissen wir warum!
Moorhuhn Version 3.11!
Neustes Outlook Update
Schau dir mal das Video an, es gibt gewisse Ähnlichkeiten mit Dir!
Tolles Portrait!von unserem Gerhard!"&vbcrlf&"haha

Attachment:

Achtung.exe
Cool.exe
Desk.exe
Einladung.exe
Geschenk.exe
Info.rtf.scr
Joke.txt.scr
Moorhuhn.exe
Neuigkeit.exe
nude.exe
Outlockupt.exe
Papst.exe
Politiker.bmp.scr
Titten.exe
VirFix.exe

Comments: A mass-mailing worm that will send itself to all recipients in the Windows Address Book.

Symptoms:


 Copies itself to the %system% directory using one of the following
file names: 
 Dfg32.exe 
 Kernel32.exe 
 MpSrvr32.exe 
 Msgsrv.exe 
 Pstore32.exe 
 Win32DLL.exe 
 WinApi32.exe 
 WinFAT32.exe 
 On Windows 95/98/Me computers, the worm also changes the shell line
in the [boot] section of the System.ini from shell = Explorer.exe to
shell = Explorer.exe (worm name listed above)

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Obtain the most recent virus defs
Start Norton AntiVirus (NAV), and make sure that NAV is configured to scan all files. For instructions on how to do this, read the document How to configure Norton AntiVirus to scan all files.
Run a full system scan.
Delete all files that are detected as W32.Entangle.Worm.