W32.Toget - NUDEPIC.JPG.EXE

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.Toget

Sender:

Varies.

Subject:

Dating, Talking And Kissing...

Message:

Here's visual some pics for you... It will surely make your partner
happier and wilder... View the included file...

Attachment:

NUDEPIC.JPG.EXE

Comments: A worm that sends itself to all contacts in Microsoft Outlook address book.

Symptoms:


 Adds the values: *Command     command.com /c copy /y
c:WindowsData.dat c:WINDOWSSYSTEM32scanregx.exe *Ruckenbrod    
C:RecycledpgaIrina4ever.exe to the registry key:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun 
 It adds the value: Vshwin32EX     C:WINDOWSSYSTEM32scanregx.exe to
the registry key:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun 
 It adds the value: *Irina      C:RecycledIrina.exe to the registry
key:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServices 
 Creates the file C:WindowsWallpaper.html. This file is 47 bytes. It
contains the message: I want a girl with big buttocks, like Irina.

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Run LiveUpdate to make sure that you have the most recent virus definitions.
Start Norton AntiVirus (NAV), and make sure that NAV is configured to scan all files.
Run a full system scan.
Delete all files that are detected as W32.Toget@mm.
Using Windows Explorer, delete the C:\Windows\Wallpaper.html file.