W95.Buggy.Worm - ie042601.exe

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W95.Buggy.Worm

Sender:

Varies.

Subject:

The last patch for Internet Explorer

Message:

Date :  A lot of virus and worms use a bug in Internet Explorer This
patchallows you to correct this problem

Attachment:

ie042601.exe

Comments: A worm that sends itself to all recipients in Windows Address Book.

Symptoms:


 It hides itself from the Windows Task List by calling
RegisterServiceProcess. Under Windows NT and 2000, this simply fails. 
 It copies itself as WindowsSystemie042601.exe. 
 So that the worm executes when Windows starts, it changes the run=
line in the Win.ini file to run=c:windowssystemie042601.exe 
 The worm drops the following files: C:Script.ini WindowsEmail.vbs
C:Win.drv WindowsWsock32.bat.

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Run LiveUpdate to make sure that you have the most recent virus definitions.
Start Norton AntiVirus (NAV), and run a full system scan, making sure that NAV is set to scanall files.
Delete any files detected as W95.Buggy.Worm@mm.
Change win.ini back to its original version.