tasklist.org
A comprehensive list of processes running in your computer
tasklist
|
attachlist
bookmark this website!
total tasks: 16297
AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.
search
most requested
ISUSPM.exe
AresLite.exe
svchost.exe
gcasDtServ.exe
ctfmon.exe
ccApp.exe
csrss.exe
alg.exe
gcasServ.exe
jusched.exe
Browse
attach
list
by file name
:
|
a
|
b
|
c
|
d
|
e
|
f
|
g
|
h
|
i
|
j
|
k
|
l
|
m
|
n
|
o
|
p
|
q
|
r
|
s
|
t
|
u
|
v
|
w
|
x
|
y
|
z
|
Name:
W32.Beagle
Sender:
Varies. Spoofed (BYZAaAgAoAr) administration@(recipient domain) (KMNORST) ann@ (W) annie@ (W) antispam@(recipient domain) (NORST) antivirus@(recipient domain) (NORST) christina@ (W) christy@ (W) jessie@ (W) lizie@ (W) management@(recipient domain) (KMNORST) noreply@(recipient domain) (KMNORST) secretGurl@ (W) staff@(recipient domain) (KMNORST) support@(recipient domain) (KMNORST)
Subject:
(empty) (Ao) ^_^ meay-meay! (FGHI) ^_^ mew-mew (-: (FGHI) [name], (W) AcAgcount notify (MNORST) AcAgcounts department (CE) Aline (FG) Anna (FG) Audra (FG) Ahtung! (CE) Bad girl (FG) Barbi (FG) beautiful (FG) Caitie (FG) Camila (CE) caroline (FG) Changes (XYZAbAp) Changes.. (AaAh) Cya (E) Daily AcAgtivity report (CE) Dear [name], (W) Dear [name], It's me ;-) (W) Don't you remember me? (W) ello! =)) (FGHI) E-mail AcAgcount disabling warning. (KMNORST) E-mail AcAgcount security warning. (KMNORST) Email AcAgcount utilization warning. (KMNORST) Email report (MNORST) E-mail technical support message. (MNORST) E-mail technical support warning. (MNORST) E-mail warning (MNORST) Encrypted document (MNORSTWXYZAaAbAhAp) Fax Message (XAaAbAh) Fax Message Received (MNORSTWXAp) Flayers among us (CE) Forum notify (MNORSTWXYZAaAbAhAp) Fotograf (FG) Freedom for everyone (CE) From Hair-cutter (CE) From me (CE) Gallery photos (FG) Greet the day (CE) groom (FG) Hardware devices price-list (CE) Hello! (W) Hello [name], (W) Hello, (W) Hello my friend (CE) Hey! (W) Hey, (W) Hey [name], (W) Hey [name], It's me -> (W) Hey, ya! =)) (FGHI) Hi! (AcAgE) Hi! :-) (FGHI) Hi [name], (W) Hi, (W) Hi, It's me (W) Hidden message (MNORSTWXAp) Hokki =) (FGH) ID (random charAcAgters)... thanks (B) I just need a friend (W) I just want to talk with someone... (W) I like reading the books and socializing, let me talk with you... (W) I like you (W) I Like YZou! (W) Important notify (MNORST) Important notify about your e-mail AcAgcount. (KMNORST) I'm a sad girl... (W) I'm bored with this life (W) Incoming message (MNORSTWXYZAaAbAhAp) I need a friend... (W) It's time to find a friend! (W) Jenny (CE) Jessica (CE) Jammie (FG) Juli (FG) Julie (FG) kate (FG) Katrina (FG) Kelley (FG) Kewl :-) (W) kleopatra (FG) Let's socialize, my friend! (W) Let's talk, my friend! (W) Like me, odore me! ;-)(W) Lisa (FG) Looking for the report (CE) Mandy (FG) Maria (CE) Mary (FG) Mary-Anne (FG) Melissa (CE) Monthly incomings summary (CE) My beautiful person (FG) My Name is Frenk (FG) My photoalbum (FG) My photos (FG) Myphotos (FG) New changes (XAp) New Price-list (CE) Notification (XYZAaAbAhAp) Notify about using the e-mail AcAgcount. (KMNORST) Notify about your e-mail AcAgcount utilization. (KMNORST) Notify from a known person ;-) (W) Notify from e-mail technical support (MNORST) Photoalbum (FG) Price (CE) Price list (CE) Pricelist (CE) Price-list (CE) Proclivity to servitude (CE) Protected message (MNORSTWXYZAaAbAhAp) Re: (Ar) Re_ (AcAg) rebecca (FG) Registration confirmation (CE) Rena (FG) Re: Document(MNORSTWXYZAaAbAhAp) Re: Hello (MNORSTWXYZAaAbAhApAr) Re: Hi (MNORSTWXYZAaAbAhApAr) Re: Incoming Fax (MNORSTW) Re: Incoming Message (MNORSTWXYZAaAbAhAp) Re: Incoming Msg (XYZAaAbAhAp) Re: Message Notify (XYZAaAbAhAp) Re: Msg reply (MNORSTWXYZAaAbAhAp) RE: Protected message (MNORSTWXAaAbAhAp) RE: Text message (MNORSTWXYZAaAbAhAp) Re: Thank you! (MNORSTWXYZAaAbAhApAr) Re: Thanks :) (MNORSTWXYZAaAbAhApAr) Re: Yahoo! (MNORSTWXYZAaAbAhAp) Ready to AcAgcept a new friend? :-) (W) Request response (MNORSTW) Sara (FG) Site changes (MNORSTWXYZAaAbAhAp) stacy (FG) Tammy (FG) The AcAgcount (CE) The employee (CE) The summary (CE) Update (YZAaAbAh) USA government abolishes the capital punishment (CE) Warning about your e-mail AcAgcount. (KORST) Wau... beautiful (-: (FG) Weah, hello! :-) (FGHI) Weeeeee! ;)))(FGHI) Weekly AcAgtivity report (CE) Well... (CE) You are dismissed (CE) You really love me? he he (CE)
Message:
_Variants O,R,S and T will appear empty but will contain HTML code that will not be visible, and will automatically download and execute the worm from a remote Web site using the Internet Explorer Object Tag Vulnerability described in Microsoft Security Bulletin MS03-032._ (empty) (E) :)) (Ar) Animals (AcAg) Archive password: (XAaAbAh) Archive password: [bitmap image] (Ap) Argh, i don't like the plaintext :) (FGHI) attach tells everything. (YZAaAbAh) attached file is protected with the password for security reasons. Password is (XAaAbAh) Attached file is protected with the password for security reasons. Password is [bitmap image] (Ap) attached file protected with the password for security reasons. Password is . (KN) attached file tells everything. (YZAh) Check attached file. (YZAaAh) Check attached file for details. (YZAaAbAh) Cometime I write a poem, play the gitar. I love a traveling, I like a romantice and I want to meet, comeday, my big love! ... Dear user of , (KN) Dear user of gateway e-mail server, (KN) Dear user of "" mailing system, (KN) Dear user of e-mail server "", (KN) Dear user, the management of mailing system wants to let you know that, (KN) Everything inside the attach (E) Fell free to chat with me I AcAgcept all ages. Don''''t worry I don''''t bite........hope to hear from you soon! (FG) For security reasons attached file is password protected. The password is (XAaAbAh) For security reasons attached file is password protected. The password is " ". (KN) For security reasons attached file is password protected. The password is [bitmap image] (Ap) For security purposes the attached file is password protected. Password -- (XAaAbAh) For security purposes the attached file is password protected. Password -- [bitmap image] (Ap) For security purposes the attached file is password protected. Password is " ". (KN) foto3 and MP3 (AcAg) fotogalary and Music (AcAg) fotoinfo (AcAg) Hello user of e-mail server, (KN) Here is the file. (YZAaAbAh) Hey, dude, it's me ^_^ :P (FGHI) Hey people whats goin on? If there is anything you want to know about me ask me... I am pretty easygoing I won't bite....not at first anywayz hahaa.....one thing I will say on here tho I am not into the Cyber thing so don't even ask.....Ciao... (FG) Hey, guys! by the way, I have no problems with my sexual life, so it's absolutly useless try to have icq sex or things like that. Thanks (FG) Hi! My name is Shreya and I am a goof off!!! So, If you love the outdoors, travelling, books, music, movies, laffing, teasing and/or can poke fun at yourself... please come a hollerin'!! (FG) I am a beautiful, sexual girl with very big ambitions and dreams. I can make happy anyone man... ... I am a honest, kind,loving,with good sense of humor...etc.,looking for true love... or maybe for pen friend.I like cats ... I am a student. I'm studying international relationships. I would like to find an interesting and AcAgtive man for serious relations. Sitting at home it is not for me. I like to go out to the theater, cinema, and nightclubs. ... I am from Taiwan but I study in Camden, New Jersey now. I like to know people from different plAcAges . (FG) i am honest, responsible, romantic person. iwould like to find my only love,to find my destiny. ... I am kind, fair, careful, gentle also want to create family. I love animal (cats, dogs), the literature, theatre, cinema, music, walks in park ... I am looking for a serious relationship. I am NOT interested in flirt and short-term love adventure. ... I am simple girl who are looking for serious relation with responsible and confident man. I am ready to give all my love and carering for a right person who is going to love and respect me ... I don't bite, weah! (H) I enjoy clean conversations but am open to conversing with women and men with little ones as well. I am very open-minded. All authorization requests will be denied if I don't receive messages and get to know you first. (FG) I have recently got demobilize from army and also I am going to AcAgt in a higher educational institution ... I like an AcAgtive life... and interesting people.. ... I like to be in a company of smart, delicate, and with a good sense of humor people. I am Bulgarian, currently getting my Master's in International Business in USA. Favorite AcAgtor: Michael Dudikoff (FG) I like to feel protected, to understand, that near to me the man, which both in sex, and in life knows what to do. It is possible to fall in love with such the man for ever. ... I love camping, dirt trAcAgk rAcAging, going for walks, and I have 2 cats - HotRod and Deebo (named from the movie 'Friday' and he lives up to it!). Life is ever changing, never always easy... (FG) I love meeting new people and making new friends. I am a Mary Kay Beauty Consultant. I am married to a wonderful man. We have no children, exept for a minature schnauzer that thinks he is a child. Looking forward to meeting you. (FG) I love productive leisure, to travel, communicate with friends. ... i love to chat to just about anyone!! (FG) I love to dance, read poetry, make people laugh, and hug as many people a day as i can. (FG) I love, as the good company, and I dream about romantic appointment at candles with loved. I still believe in love. ... In order to read the attach you have to use the following password: (X) In order to read the attach you have to use the following password: [bitmap image] (Ap) In order to read the attach you have to use the following password: . (KN) I sit with elders of a gentle rAcAge, whose world is seldom seen.Who sit and talk of days for which they wait, when all will be revealed. These are song lyrics. (FG) I study at school, I like to spend time cheerfully even if not all so well, I hompe and trust, that all bad when nibud will pass and necessarily nastanet there would be a desire. ... I very much love new AcAgquaintances, I love music, meetings with friends. I go on night clubs, except for parties I sometimes visit theatres and I love cinema. In general I only shall be glad to new AcAgquaintance and class dialogue... ... I very much love productive leisure, to prepare for new exotic dishes, at leisure to leave with friends on the nature, to float, I like to go for a drive on mountain skiing, to visit excursions, travel. Very easy going. ... If I'm online, it problably means I'm pretty bored....so feel free to message me and say hi or whatever else comes to mind at the moment. (FG) If you are going to make me cry, at least be there to wipe away the tears *Right now the worst thing for you to tell me that I can find someone better than you, especially when you are all I want (FG) I'm a social butterfly and a natural flirt. Very hard to get my complete attention. Very open and will answer almost anything. But please don't piss me off. I can be sweet and cuddly or a whatever mood I am in that day so everyday (FG) I'm a young lady of 20 years old i'd like to find my second part!!! ... I'm an open minded person and enjoy chatting w/ other people. I'm free and willing to chat about anything. So feel free to Imed me if you wanna chat. (FG) I'm married and I stay at home. And I don't do cyber sex so leave me the fuck alone (FG) I'm so bored, let me talk with you... ... i'm tall and skiny I'm studying in Pharm. D program in FL. i like music, movie, dancing, sports, SCUBA diving, traveling and make a lot friends. (FG) In order to read the attach you have to use the following password: (AaAbAh) Look it through (E) Looking forward for a response :P (FGh) Love the outdoors, literature, writing, and athletics (FG) Lovely animals (AcAg) Message is in attach (YZAaAbAh) More info is in attach (YZAaAbAh) My hobbies include crochet, sewing, painting lead figures and playing AD&D. Favorite Activities include fishing and camping. I love cats, unicorns(go figure), and fantasy in general. (FG) New price (Ao) Nice friends, nice men, nice sex and feeling great. I don't mind the odd bout of cybersex as I love to use my imagination when I masterbate. (FG) Note: Use password (XAaAbAh) Note: Use password [bitmap image] to open archive. (Ap) Password (XAaAbAh) Password - [bitmap image] (Ap) Password: [bitmap image] (Ap) Password: (XAaAbAh) Pay attention at the attach. (YZAaAbAh) Please, have a look at the attached file. (YZAaAbAh) Please, read the document. (YZAaAbAh) Predators (AcAg) Read the attach. (YZAaAbAh) Request (E) Response (E) Screen and Music (AcAg) Searching for the right person,for real man, who will really cares and love me. ... See attach. (YZAaAbAh) See the attached file for details. (YZAaAbAh) Single Mom of 3, Full time college student, Graduate in December with an Associates of Applied Science in Computer Information Systems Love the internet. (FG) Subject (E) Test =)(Random charAcAgters)--Test, yep. The AcAgcess is open (I) The snake (AcAg) When The Trust is Gone So Is The Love That Fades Like the Rain Washing Away All The Sorrows Of Yesterday Why I Ask Myself Must It End Like This Tomorrow, I Tell Myself, I'll Be Okay For Now, I'll Just Live In The Memories Of Our Life Together (FG) You are cool :-) ... You are my prince :-) ... You don't know what you've got till it's gone *You hurt me more than I deserve, how can you be so cruel? I love you more than you deserve, how can I be such a fool?(FG) You have won. (I) Your document is attached. (YZAaAbAh) Your file is attached. (YZAaAbAh) Yours ID - -Thank (B)
Attachment:
(random) (BCE) 08_price.zip (Ao) Aline.exe (FG) Aline.scr (FG) Aline.zip (FG) Alive_condom.bmp (X) Alive_condom.com (Ap) Alive_condom.cpl (Ap) Alive_condom.gif (X) Alive_condom.hta (Ap) Alive_condom.jpg (X) Alive_condom.scr (Ap) Alive_condom.vbs (Ap) Alive_condom.zip (Ap) Anna.exe (FG) Anna.scr (FG) Anna.zip (FG) attach.pif (KN) attach.rar (N) attach.zip (KN) attacheddocument.zip (HI) attachedfile.zip (HI) Audra.exe (FG) Audra.scr (FG) Audra.zip (FG) Bad girl.exe (FG) Bad girl.scr (FG) Bad girl.zip (FG) Barbi.exe (FG) Barbi.scr (FG) Barbi.zip (FG) Caitie.exe (FG) Caitie.scr (FG) Caitie.zip (FG) caroline.exe (FG) caroline.scr (FG) caroline.zip (FG) Cat.com (AcAg) Cat.cpl (AcAg) Cat.exe (AcAg) Cat.scr (AcAg) Cat.zip (AcAg) Counter_strike.bmp (X) Counter_strike.com (Ap) Counter_strike.cpl (Ap) Counter_strike.gif (X) Counter_strike.hta (Ap) Counter_strike.jpg (X) Counter_strike.scr (Ap) Counter_strike.vbs (Ap) Counter_strike.zip (Ap) Details.bmp (X) Details.com (WYZAaAbAhAp) Details.cpl (WYZAaAbAhAp) Details.exe (WYZAaAbAhAp) Details.gif (X) Details.hta (WYZAaAbAhAp) Details.jpg (X) Details.pif (N) details.pif (N) Details.rar (N) details.rar (N) Details.scr (WYZAaAbAhAp) Details.vbs (WYZAaAbAhAp) details.zip (N) Details.zip (NWYZAaAbAhAp) Document.bmp (X) Document.com (WYZAaAbAhAp) Document.cpl (WYZAaAbAhAp) Document.exe (WYZAaAbAhAp) Document.gif (X) Document.hta (WYZAa) Document.jpg (X) Document.pif (N) Document.rar (N) Document.scr (WYZAaAbAhAp) Document.vbs (WYZAaAbAhAp) Document.zip (HIKNWYZAaAbAhAp) Dog.com (AcAg) Dog.cpl (AcAg) Dog.exe (AcAg) Dog.scr (AcAg) Dog.zip (AcAg) Doll.com (AcAg) Doll.cpl (AcAg) Doll.exe (AcAg) Doll.scr (AcAg) Doll.zip (AcAg) Encrypted.pif (N) Encrypted.rar (N) Encrypted.zip (N) first_part.pif (N) first_part.rar (N) first_part.zip (N) Fish.com (AcAg) Fish.cpl (AcAg) Fish.exe (AcAg) Fish.scr (AcAg) Fish.zip (AcAg) foto1.com (AcAg) foto1.cpl (AcAg) foto1.exe (AcAg) foto1.scr (AcAg) foto1.zip (AcAg) foto2.com (AcAg) foto2.cpl (AcAg) foto2.exe (AcAg) foto2.scr (AcAg) foto2.zip (AcAg) foto3.com (AcAg) foto3.cpl (AcAg) foto3.exe (AcAg) foto3.scr (AcAg) foto3.zip (AcAg) Gallery.exe (FG) Gallery.scr (FG) Gallery.zip (FG) game.exe (Q) Garry.com (AcAg) Garry.cpl (AcAg) Garry.exe (AcAg) Garry.scr (AcAg) Garry.zip (AcAg) Gift.pif (N) Gift.rar (N) Gift.zip (N) Half_Live.bmp (X) Half_live.com (Ap) Half_live.cpl (Ap) Half_Live.gif (X) Half_live.hta (Ap) Half_Live.jpg (X) Half_live.scr (Ap) Half_live.vbs (Ap) Half_live.zip (Ap) I_search_for_you.bmp (X) I_search_for_you.gif (X) I_search_for_you.jpg (X) Info.bmp (X) Info.com (WYZAaAbAhAp) Info.cpl (WYZAaAbAhAp) Info.exe (WYZAaAbAhAp) Info.gif (X) Info.hta (WYZAaAbAhAp) Info.jpg (X) Info.pif (KN) Info.rar (N) Info.scr (WYZAaAbAhAp) Info.vbs (WYZAaAhAp) Info.zip (HIKNWYZAaAbAhAp) Information.bmp (X) Information.com (WYZAaAbAhAp) Information.cpl (WYZAaAbAhAp) Information.exe (WYZAaAbAhAp) Information.gif (X) Information.hta (WYZAaAbAhAp) Information.jpg (X) Information.pif (KN) Information.rar (N) Information.scr (WYZAaAbAhAp) Information.vbs (WYZAaAbAhAp) Information.zip (KNWYZAaAbAhAp) It_I.exe (FG) It_I.scr (FG) It_I.zip (FG) Jammie.exe (FG) Jammie.scr (FG) Jammie.zip (FG) Joke.bmp (X) Joke.com (ApAr) Joke.cpl (ApAr) Joke.exe (Ar) Joke.gif (X) Joke.hta (Ap) Joke.jpg (X) Joke.scr (ApAr) Joke.vbs (Ap) Joke.zip (Ap) Juli.exe (FG) Juli.scr (FG) Juli.zip (FG) Julie.exe (FG) Julie.scr (FG) Julie.zip (FG) kate.exe (FG) kate.scr (FG) kate.zip (FG) Katrina.exe (FG) Katrina.scr (FG) Katrina.zip (FG) Kelley.exe (FG) Kelley.scr (FG) Kelley.zip (FG) kleopatra.exe (FG) kleopatra.scr (FG) kleopatra.zip (FG) Letter.zip (HI) Lisa.exe (FG) Lisa.scr (FG) Lisa.zip (FG) Loves_money.bmp (X) Loves_money.com (Ap) Loves_money.cpl (Ap) Loves_money.gif (X) Loves_money.hta (Ap) Loves_money.jpg (X) Loves_money.scr (Ap) Loves_money.vbs (Ap) Loves_money.zip (Ap) Mandy.exe (FG) Mandy.scr (FG) Mandy.zip (FG) Manufacture.bmp (X) Manufacture.com (Ap) Manufacture.cpl (Ap) Manufacture.gif (X) Manufacture.hta (Ap) Manufacture.jpg (X) Manufacture.scr (Ap) Manufacture.vbs (Ap) Manufacture.zip (Ap) Mary-Anne.exe (FG) Mary-Anne.scr (FG) Mary-Anne.zip (FG) Mary.exe (FG) Mary.scr (FG) Mary.zip (FG) Message.bmp (X) Message.com (WYZAaAbAhAp) Message.cpl (WYZAaAbAhAp) Message.exe (WYZAaAbAhAp) Message.gif (X) Message.hta (WYZAaAbAhAp) Message.jpg (X) Message.pif (KN) Message.rar (N) Message.scr (WYZAaAbAhAp) Message.vbs (WYZAaAbAhAp) Message.zip (HIKNWYZAaAbAhAp) MoreInfo.bmp (X) MoreInfo.com (WYZAaAbAhAp) MoreInfo.cpl (WYZAaAbAhAp) MoreInfo.exe (WYZAaAbAhAp) MoreInfo.gif (X) MoreInfo.hta (WYZAaAbAhAp) MoreInfo.jpg (X) MoreInfo.pif (KN) MoreInfo.rar (N) MoreInfo.scr (WYZAaAbAhAp) MoreInfo.vbs (WYZAaAbAhAp) MoreInfo.zip (HIKNWYZAaAbAhAp) MP3.com (Ag) MP3.cpl (Ag) MP3.exe (Ag) MP3.scr (Ag) MP3.zip (Ag) Msg.zip (HI) Msginfo.zip (HI) Music_MP3.com (Ag) Music_MP3.cpl (Ag) Music_MP3.exe (Ag) Music_MP3.scr (Ag) Music_MP3.zip (Ag) myfotos.exe (FG) myfotos.scr (FG) myfotos.zip (FG) Nervous_illnesses.bmp (X) Nervous_illness.com (Ap) Nervous_illness.cpl (Ap) Nervous_illnesses.gif (X) Nervous_illness.hta (Ap) Nervous_illnesses.jpg (X) Nervous_illness.scr (Ap) Nervous_illness.vbs (Ap) Nervous_illness.zip (Ap) New_MP3_Player.com (Ag) New_MP3_Player.cpl (Ag) New_MP3_Player.exe (Ag) New_MP3_Player.scr (Ag) New_MP3_Player.zip (Ag) new__price.zip (Ao) new_price.zip (Ao) newprice.zip (Ao) Photoalbum.exe (FG) Photoalbum.scr (FG) Photoalbum.zip (FG) Photomontage.exe (FG) Photomontage.scr (FG) Photomontage.zip (FG) Picture.exe (FG) Picture.scr (FG) Picture.zip (FG) Price.com (Ar) price.com (Ar) Price.cpl (Ar) price.cpl (Ar) Price.exe (Ar) price.exe (Ar) Price.scr (Ar) price.scr (Ar) price.zip (Ao) price2.zip (Ao) price_08.zip (Ao) price_new.zip (Ao) pub_document.pif (N) pub_document.rar (N) pub_document.zip (N) Readme.bmp (X) Readme.com (WYZAaAbAhAp) Readme.cpl (WYZAaAbAhAp) Readme.exe (WYZAaAbAhAp) Readme.gif (X) Readme.hta (WYZAaAbAhAp) Readme.jpg (X) Readme.pif (KN) Readme.rar (N) Readme.scr (WYZAaAbAhAp) Readme.vbs (WYZAaAbAhAp) Readme.zip (HIKNWYZAaAbAhAp) rebecca.exe (FG) rebecca.scr (FG) rebecca.zip (FG) Rena.exe (FG) Rena.scr (FG) Rena.zip (FG) Sara.exe (FG) Sara.scr (FG) Sara.zip (FG) Secret.com (AcAg) Secret.cpl (AcAg) Secret.exe (AcAg) Secret.scr (AcAg) Secret.zip (AcAg) Smoke.bmp (X) Smoke.gif (X) Smoke.jpg (X) stAcAgy.exe (FG) stAcAgy.scr (FG) stAcAgy.zip (FG) Tammy.exe (FG) Tammy.scr (FG) Tammy.zip (FG) Text.pif (N) Text.rar (N) Text.zip (HIN) text_document.bmp (X) text_document.com (YZAaAbAhAp) text_document.cpl (YZAaAbAhAp) text_document.exe (YZAaAbAhAp) text_document.gif (X) text_document.hta (YZAaAbAhAp) text_document.jpg (X) text_document.pif (N) text_document.rar (N) text_document.scr (YZAaAbAhAp) text_document.zip (NYZAaAbAhAp) TextDocument.pif (KN) TextDocument.rar (N) TextDocument.zip (HIKN) TextFile.pif (K) TextFile.zip (HIK) the_message.bmp (X) the_message.com (Ap) the_message.cpl (Ap) the_message.gif (X) the_message.hta (Ap) the_message.jpg (X) the_message.scr (Ap) the_message.vbs (Ap) the_message.zip (Ap) Toy.bmp (X) Toy.com (Ap) Toy.cpl (Ap) Toy.gif (X) Toy.hta (Ap) Toy.jpg (X) Toy.scr (Ap) Toy.vbs (Ap) Toy.zip (Ap) Updates.bmp (YZ) Updates.com (YZAaAbAh) Updates.cpl (YZAaAbAh) Updates.exe (YZ) Updates.hta (YZAaAbAh) Updates.scr (YZAaAbAh) Updates.zip (YZAaAbAh) You_are_dismissed.bmp (X) You_are_dismissed.com (Ap) You_are_dismissed.cpl (Ap) You_are_dismissed.gif (X) You_are_dismissed.hta (Ap) You_are_dismissed.jpg (X) You_are_dismissed.scr (Ap) You_are_dismissed.vbs (Ap) You_are_dismissed.zip (Ap) You_will_answer_to_me.bmp (X) You_will_answer_to_me.com (Ap) You_will_answer_to_me.cpl (Ap) You_will_answer_to_me.gif (X) You_will_answer_to_me.hta (Ap) You_will_answer_to_me.jpg (X) You_will_answer_to_me.scr (Ap) You_will_answer_to_me.vbs (Ap) You_will_answer_to_me.zip (Ap) Your_complaint.bmp (X) Your_complaint.gif (X) Your_complaint.jpg (X) Your_money.bmp (X) Your_money.gif (X) Your_money.jpg (X)
Comments:
A mass-mailing worm that AcAgcesses remote Web sites and sends email to all the contAcAgts itcan find inside files with the extensions .wab, .htm, .html, and .txt
Symptoms:
Checks if the system date is later than Jan 28th, 2004. If so, the worm will not do anything. Inserts the file %System%bbeagle.exe. Launches calc.exe. Adds the value: "d3dupdate.exe" = "%system%bbeagle.exe" to the registry key: HKEYZ_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun Adds the values: "uid" = "[Random Value]" "frun" = "1" to the registry key: HKEYZ_CURRENT_USERSoftwareWindows98 Adds the value: "gigabit.exe"="%System%gigabit.exe" to the registry key: HKEYZ_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun so that the worm runs when you start Windows. (U)
Recommended Cleanup Software:
We found that
Easy SpyRemover
is the most effective tool for removing this file.
Manual Removal Instructions:
Disable System Restore (Windows Me/XP).
Update the virus definitions.
Delete the value that was added to the registry, and restart the system.
Run a full system scan and delete all the files detected as W32.Beagle.A@mm.
© Copyright 2004, TaskList.org. All rights reserved. Portions copyright by
Paul Collins
(Pacs Portal).
Disclaimer
.
Links