W32.Panol - Virus_scanner.exe

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.Panol

Sender:

Varies.  Usually someone you know.

Subject:

The easy, automatic way to keep your PC virus-free

Message:

Online hackers know more than 2,500 ways to break into naked,
unprotected PC systems. In seconds, they steal private files, credit
card statements, tax records, passwords even Social Security Numbers.

Attachment:

Virus_scanner.exe

Comments: A mass-mailing worm that uses Microsoft Outlook to send itself to all the contacts in the Outlook Address Book

Symptoms:


 Adds the value: "Virus_Scanner"="%Windir%Virus_Cleaner.exe" to the
registry key:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun so that
the worm runs when you start Windows. 
 Changes the Home Page of Internet Explorer to www.ankara.edu.tr. 
 Creates the subkey: HKEY_CURRENT_USERSOFTWAREMicrosoftInfected and
adds the following values to this subkey: "Name"="Panolili"
"Possessor"="0x06.0x15.0x06.0x09.0x0F.0x0C.0x0F.0x0C"

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Disable System Restore (Windows Me/XP).
Update the virus definitions.
Run a full system scan and delete all the files detected as W32.Panol@mm.
Delete the value that was added to the registry.
Remove the line added that was added to the Win.ini (Windows 95/98/Me).