W32.Gubed - Start.vbs

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.Gubed

Sender:

Varies.

Subject:

Congratulations for your site
Important EMail for [recipient's name]

Message:

Congratulations for your siteThis is a good tool to improve it.Best
Regards.
Look at this attached file, it may be important.

Attachment:

Start.vbs
WebMakeFullInstall.exe

Comments: A worm that attempts to send itself to all recipients in the Outlook Address Book along with sending itself to all e-mail addresses it finds in htm, html files on the infected machine

Symptoms:


 Adds the value Debug     %System%DebugW32.exe to the registry key
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun so that
the file runs when you restart Windows.

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Update the virus definitions
Run a full system scan
Delete all files that Norton AntiVirus detects as W32.Gubed@mm.
Delete the valueDebug %System%\DebugW32.exefrom the registry keyHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run