tasklist.org
A comprehensive list of processes running in your computer
tasklist
|
attachlist
bookmark this website!
total tasks: 16297
AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.
search
most requested
ISUSPM.exe
AresLite.exe
svchost.exe
gcasDtServ.exe
ctfmon.exe
ccApp.exe
csrss.exe
alg.exe
gcasServ.exe
jusched.exe
Browse
attach
list
by file name
:
|
a
|
b
|
c
|
d
|
e
|
f
|
g
|
h
|
i
|
j
|
k
|
l
|
m
|
n
|
o
|
p
|
q
|
r
|
s
|
t
|
u
|
v
|
w
|
x
|
y
|
z
|
Name:
W32.NewApt
Sender:
Varies.
Subject:
Just for your eyes.
Message:
he, your lame client cant read HTML, haha.click attachment to see some stunninglyHOT stuff http://stuart.messagemates.com/index.htmlHypercool Happy New Year 2000 funnyprograms and animations...We attached our recent animation fromthis site in our mail! Check it out!
Attachment:
baby.exe bboy.exe boss.exe casper.exe cheeseburst.exe cooler1.exe cooler3.exe copier.exe cupid2.exe farter.exe fborfw.exe gadget.exe goal.exe goal1.exe g-zilla.exe hog.exe irnglant.exe monica.exe panther.exe party.exe pirate.exe saddam.exe theobbq.exe video.exe
Comments:
A worm that propagates by email. It has its own SMTP (email) engine to email itself. The worm searches various files on the hard disk to find email address to which it sends itself.
Symptoms:
Adds the following registry key so that it loads each time that the computer is restarted: HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/CurrentVersion/Run/tpawen
Recommended Cleanup Software:
We found that
Easy SpyRemover
is the most effective tool for removing this file.
Manual Removal Instructions:
Remove files in Safe mode
Please follow these steps to remove the files that the worm has placed on the computer:
Restart the computer in Safe mode.
Windows 95
Exit all programs, and then shut down the computer.
Turn off the power and wait 30 seconds. You must turn off the power to remove the virus from memory. Do not use the reset button.
When you see the "Starting Windows 95" message, press F8.
Type the number for Safe mode, then press Enter.
Windows 98
Click Start, and click Run.
Type msconfig and then Click OK. The System Configuration Utility dialog box appears.
Click the General tab, and click Advanced.
Check Enable Startup Menu, click OK, and then OK again.
Exit all programs, and shut down the computer.
Turn off the power, and wait 30 seconds. You must turn off the power to remove the virus from memory. Do not use the reset button.
Immediately press and hold down the Ctrl key.
Type the number for Safe mode, and then press Enter.
Click Start, point to Find, and click Files or Folders.
Make sure that Look In points to the drive on which your Temp folder is located. In most cases, this is the drive C.
In the Named box, type the following and then press Enter:
*.tmp
In the Results pane, select all of the displayed files and then press Delete. Click Yes to confirm.
NOTE: If many files have been found, select them all by clicking the File menu and then clicking Select All.
Close the Find All Files window.
Empty the Recycle Bin.
Edit the registry
Please follow these steps to undo the changes that the worm has made to the Windows registry:
CAUTION: We strongly recommend that you back up the system registry before making any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Please make sure you modify only the keys specified. Please see How to back up the Windows registry, before proceeding.
Click Start, and click Run. The Run dialog box appears.
Type regedit and then click OK. The Registry Editor opens.
Navigate to the following key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
In the right pane, locate and select the following value:
tpawen
Press Delete, and then click Yes to confirm.
Exit the Registry Editor.
Restart and scan
Restart the computer and allow it to start Windows. This will likely take longer than it normally would.
Start Norton AntiVirus (NAV), and run LiveUpdate to make sure that you have the most recent definitions.
Run a full system scan and delete any files that NAV finds are infected.
© Copyright 2004, TaskList.org. All rights reserved. Portions copyright by
Paul Collins
(Pacs Portal).
Disclaimer
.
Links