W32.Israz - game.exe

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.Israz

Sender:

copyright@yahoo-inc.com
help@google.com
update@microsoft.com
windows@microsoft.com (B)

Subject:

Auto Search Wizard
PS1
Something new for you (B)
Support For Search
Update Your ToolBar
Windows Update
Yahoo FAQ
Your file is attached to message. (B)

Message:

Did you know...This is one tip of many tips that can help you use your
computer easily and simply.Open the file attached, and enjoy. (B)
Hi!, it's me !!!I sent you a new game for our great friendship, open
it, and enjoy. (B)
Your file is attached to message.For more information go to Windows
Update http:/ /windowsupdate.microsoft.com
Your file is attached to message.For more information go to Yahoo
home page http:/ /www.yahoo.com

Attachment:

FAQ
game.exe
Q322593.exe
tips.exe (B)
ToolBar.exe
Update.exe
Wizard.exe

Comments: A mass-mailing worm that sends itself to all the contacts in the Windows Address Book.Also attempts to spread itself through some file-sharing networks, such as KaZaA, Morpheus,eMule, eDonkey2000, BearShare, and iMesh

Symptoms:


 Copies itself as the following: 
 %System%vShell.exe 
 %System%Win32.exe 
 %Temp%FAQ.exe 
 %Temp%Fun.exe 
 %Temp%Q322593.exe 
 %Temp%Support.exe 
 %Temp%ToolBar.exe 
 %Temp%Update.exe 
 %Temp%Wizard.exe 
 Adds the value: Win32"="%System%Win32.exe to the registry key:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun so that
the worm runs each time you start Windows.

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Disable System Restore (Windows Me/XP).
Update the virus definitions.
Run a full system scan and delete all the files detected as W32.Israz@mm.
Reverse the changes that were made to the registry.