W32.Redesi - UserConf.exe

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.Redesi

Sender:

Varies.

Subject:

A new type of Lager / Weed variant...... sorted !
hell is coming for u, u will be sucked into a bottomless pit!!!  --
Gaz
I don't want to write anything but Si is bullying me. -- Jim
I want to live in a wooden house -- Arwel
Kev Gives great orgasms to ladeez!! -- Kev
Michelle still owes me 10 ... shit ! -- Si
My dad not caring about my exam results -- by Michelle
Scientists have found traces of the HIV virus in cow's milk...here is
the proof -- Will
Why have I only got cheese and onion crisps ? I hate them !! -- Si
Yay. I caught a fish -- Si

Message:

heh. I tell ya this is nuts ! You gotta check it out !

Attachment:

Common.exe
Disk.exe
Rede.exe
Si.exe
UserConf.exe

Comments: A worm that emails itself to all recipients in the Outlook address book.

Symptoms:


 It copies itself as: C:Common.exe, C:Rede.exe, C:Si.exe,
C:UserConf.exe, C:disk.exe and sets the attribute of the files to
hidden. 
 Displays the fake error message: C:Rede.exe is not a valid Win32
application

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Run LiveUpdate to make sure that you have the most recent virus definitions.
Start Norton AntiVirus (NAV), and make sure that NAV is configured to scan all files.
Run a full system scan.
Delete all files that are detected as W32.Redesi@mm