W32.Sponge - Spongy.exe

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.Sponge

Sender:

Varies.

Subject:

SpongeBob Wallpaper

Message:

Send this to your friends and make them laugh...

Attachment:

Spongy.exe

Comments: A mass-mailing worm that uses Microsoft Outlook to send itself to all contacts in the Outlook Address Book

Symptoms:


 Copies itself as: C:%windir%kn0xace1.com C:ExploreHelp.exe
C:Porno.scr C:Jokes.pif C:SpongeBob_Game.exe C:SpongeBob.scr
C:SpongeBob.com 
 Adds the value Winrun C:%windir%kn0xace1.com to the registry key
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunServices

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Update the virus definitions.
Run a full system scan.
Delete all files that are detected as W32.Spongy@mm, and repair all Word documents that are detected as W97M.Sponge.
Delete C:\Readme.txt and C:\SpongeBob.eml manually.
Restore all overwritten .scr and .pif files from known clean copies.
Delete the value that the worm added to the registry key