W32.Goner - Gone.scr

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.Goner

Sender:

Varies. Usually someone who knows you.

Subject:

"Hi."

Message:

Varies.

Attachment:

Gone.scr
(must be clicked on to activate)

Comments: A worm that can spread its infection using the ICQ network as well as by emailusing Microsoft Outlook. If IRC is installed, this worm can also insert mIRC scriptsthat will enable the computer to be used in Denial of Service (DOS) attacks.The IRC channel used for controlling the worm is currently blocked, preventing thisfunctionality.

Symptoms:


 Adds the value C:%SYSTEM%gone.scr C:%SYSTEM%gone.scr to the registry
key HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: If the removal tool doesn't work, try this:
Restart the computer in Safe mode or end the process on the part of the worm that is runningin memory.
Reverse the changes that the worm made to the registry.
Restart the computer.
Reinstall Norton AntiVirus.