tasklist.org
A comprehensive list of processes running in your computer
tasklist
|
attachlist
bookmark this website!
total tasks: 16297
AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.
search
most requested
ISUSPM.exe
AresLite.exe
gcasDtServ.exe
svchost.exe
ctfmon.exe
ccApp.exe
csrss.exe
alg.exe
gcasServ.exe
jusched.exe
Browse
attach
list
by file name
:
|
a
|
b
|
c
|
d
|
e
|
f
|
g
|
h
|
i
|
j
|
k
|
l
|
m
|
n
|
o
|
p
|
q
|
r
|
s
|
t
|
u
|
v
|
w
|
x
|
y
|
z
|
Name:
W32 HLLW.Darby
Sender:
Varies.
Subject:
The Subject of the message is randomly chosen from the following list: 11 Fantasmas 11 Ghosts 7 Days 7 Dias A Gift Adiviananzas y Trivias Areas As much as they love you? Bardiel Buscas Amistad o Amor? Chupayruna Ciber Girls Confirmacion de Suscripcion Confirmation Gives Suscription Conoces la Dimension Desubicada? Cuanto te aman? Cuentas Hack For You GEDZAC Targeta GEDZAC postcard GamesOnLine Greetings Informacion Information Invitacion Invitation La Profecia del Vampiro Lamb Goes he Goes Las fotos mas hot Love Magia Magic Mail Delivery Return System Manual de Seduccion Manual gives Secuction Microsoft Internet Explorer Models Nostradamus and The Torres Twins Nostradamus y Las Torres Gemelas Odisea Odyssey Para Ti Que Foto :) Riddles and Tribias Sadness :( Saludos Series, Movies, novels Series, Peliculas, Telenovelas SexSimulator Sin Miedo That picture :) The First The Master The Pictures but Hot The Prophecy gives the Vampire Tristeza :( Un Regalo Utopia Va Cordero Va Without Fear Zonas do you Know the Dimension Desubicada? do you Look for Friendship or Love? you Count Hack
Message:
Varies.
Attachment:
(Demo).pif 11Fantasmas.scr 11Ghosts.scr Angel.scr AutoAyuda.pif Bardiel Boletin N.205.com Bulletin N.205.com Carta.scr Chupayruna.scr CiberGirls.pif Crack.bat CuentasPWL.pif Day.scr DimensionDesubicada.scr Fotos.scr Help.pif Image.pif Letter.scr MailFile.bat ManualMagia.bat ManualMagic.bat ManualSec.pif ManualSeduction.pif Microsoft Bulletin 200.com Nostradamus.pif Pictures.scr Profecia.pif Realidad.bat Reality.bat SexSimulator.exe Slayer.pif TF.pif TestLove.pif Trivia.bat TuFoto.pif Visor.bat YourPicture.pif finder.bat prophecy.pif www.EnterTvRed.com www.Models.com www.ModelsALLg.com www.XImage.com WWW.XIMAGE.COM www.ftpfree.com www.gmol.com www.rdA.com
Comments:
A worm which spreads through file-sharing networks such as Kazaa and Morpheus, and mayalso attempt to spread through email and IRC.
Symptoms:
When executed, this worm displays a message box which says either "The file this total or partially damaged, impossible to open the file"
Recommended Cleanup Software:
We found that
Easy SpyRemover
is the most effective tool for removing this file.
Manual Removal Instructions:
Disable System Restore (Windows Me/XP).
Update the virus definitions.
Run a full system scan and delete all the files detected as W32.HLLW.Darby.
Reverse the modifications made to the registry.
The next step you perform depends on your operating system:
Windows Me: If you are running Windows Me, the Windows Me file-protection process mayhave made a backup copy of the Win.ini file that you need to edit. If this backup copy exists, it will be in the C:\Windows\Recent folder. Symantec recommends that you delete this file before continuing with the steps in this section. To do this:
Start Windows Explorer.
Browse to and select the C:\Windows\Recent folder.
In the right pane, select the Win.ini file and delete it. The Win.ini file will be regenerated when you save your changes to it in step F.
Windows 95/98 (start here; ME continues here):
Click Start, and then click Run.
Type the following, and then click OK.edit c:\windows\win.ini
In the [windows] section of the file, look for a line similar to:run = C:\WINDOWS\SYSTEM\
If this line exists, delete it.
Click File, and then click Save.
Click File, and then click Close.
Click File, and then click Open. Enter "C:\Windows\system.ini" when prompted for a filename.
In the [boot] section of the file, look for a line similar to:
shell = Explorer.exe C:\WINDOWS\SYSTEM\
If this line exists, delete everything to the right of Explorer.exe.
When you are done, it should look like:
shell = Explorer.exe
Click File, and then click Save
Click File, and then click Close.
Click File, and then click Open. Enter "\Autoexec.bat" when prompted for a filename.
Scroll to the bottom of the file and delete any line similar to:
@win C:\WINDOWS\SYSTEM\(random filename)
Click File, and then click Save.
Click File, and then click Exit.
© Copyright 2004, TaskList.org. All rights reserved. Portions copyright by
Paul Collins
(Pacs Portal).
Disclaimer
.
Links