W32.Fourseman - Win_Security_Patch

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.Fourseman

Sender:

Varies.

Subject:

A windows patch (B)
Always besides me (C)
AIM password stealer.exe (B)
Best wishes (C)
Bin Laden-The truth.exe (B)
BugFixer.exe (B)
Check out this program, it has a lot of functions! (B)
Christina Aguilera fucked.exe (B)
Easy_Crack_creator.exe (B)
Hotmail password stealer.exe (B)
Interesting file (B)
Microsoft_patch_7209.exe (B)
Never forget about you (C)
New update! (B)
Norton AntiVirus Crack.exe (B)
Pamela Anderson Sex.exe (B)
Porn_Downloader.exe (B)
RegCleaner_Setup.exe (B)
Saddam-Alive.exe (B)
Soccer game.exe (B)
This Windows update is very simple and powerful! It helped me a lot!
(B)
Try this patch that i've found yesterday, it's very useful! (B)
Upgrade_Installer.exe (B)
Update your system (B)
Updater.exe (B)
Very important! (B)
Very important patch! (A)
Visual Studio Guide.exe (B)
WinBugsFixInstaller.exe (B)
WinUpdate.exe (B)
WindowsPatch.exe (B)
WinTool.exe (B)
You are my hero! (C)

Message:

Check this out... (C)
Hi. Here i've attached a very important patch, very useful to find
and fix a lot of bugs in windows and to improve the security of your
windows. If installed, this patch it's able to prevent virus
infections or other dangerous things. I hope that this will be useful!
Bye! (A)
Hi! Install this useful program, and tell me what you think about it!
Greet (B)
Look what I found... (C)
Read this... (C)
This is interesting... (C)

Attachment:

AIM password stealer.exe (B)
Bin Laden-The truth.exe (B)
BugFixer.exe (B)
Christina Aguilera fucked.exe (B)
Easy_Crack_creator.exe (B)
Great_Virus_Creation_Kit.exe (A)
Himera.exe (C)
Hotmail password stealer.exe (B)
Microsoft_patch_7209.exe (B)
Norton AntiVirus Crack.exe (B)
Pamela Anderson Sex.exe (B)
Porn_Downloader.exe (B)
RegCleaner_Setup.exe (B)
Saddam-Alive.exe (B)
Soccer game.exe (B)
SProcess.exe (A)
Updater.exe (B)
Upgrade_Installer.exe (B)
Visual Studio Guide.exe (B)
Win_Security_Patch_2602.exe (A)
WinBugsFixInstaller.exe (B)
WindowsPatch.exe (B)
WinTool.exe (B)
WinUpdate.exe (B)

Comments: A mass-mailing worm that attempts to send itself to all the email addresses it finds in the .htm, .html, .htt, and .dbx files on an infected computer.

Symptoms:


 Copies itself as one of the following files: %Temp%SProcess.exe or
%Temp%Great_Virus_Creation_Kit.exe 
 Or, as these three files: %Temp%Win_Security_Patch_2602.exed,
%Windir%Explorer.exe or %Windir%SystemExplorer.exe

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: For A and B:
Update the virus definitions.
Run a full system scan and delete all the files detected as W32.Fourseman.A.
If Explorer.exe was overwritten, restore it from backup or re-install it.
For C:
Disable System Restore (Windows Me/XP).
Update the virus definitions.
Restart the computer in Safe mode or VGA mode.
Run a full system scan and delete all the files detected as W32.Fourseman.C@mm.
Delete the value that was added to the registry.